View the Exhibit to observe the privileges granted to the MGR_ROLE role. The SCOTT user has been granted the CONNECT and RESOURCE roles only. The database administrator (DBA) grants MGR_ROLE to the SCOTT user by using this command: SQL> GRANT MGR_ROLE TO SCOTT WITH ADMIN OPTION; Which statement is true about the SCOTT user after he is granted this role? A) The SCOTT user can grant the MGR_ROLE role and the privileges in it to other users. B) The SCOTT user can grant the privileges in the MGR_ROLE role to other users but not with ADMIN_OPTION. C) The SCOTT user can grant only the MGR_ROLE role to other users but not the privileges in it. D) The SCOTT user can grant the privileges in the MGR_ROLE role to other users but cannot revoke privileges from them.
Answer: C With admin option选项使被授予角色的用户有将该角色再授予别人的权力,但不具有将角色中的权限单独授予别人的权利。当然具有将该角色再收回的权力。此外,对角色赋予权限的时候不能加上with admin option或者with grant option选项。 假如a将系统权限授予b,b将此权限授予c,当a从b处收回系统权限时,不会收回c的系统权限。 假如a将对象权限授予b,b将此权限授予c,当a从b处收回对象权限时,同时收回c的对象权限。 假如a将角色授予b,b将此角色授予c,当a从b处收回该角色时,不会收回c的角色(包括角色中的对象权限和系统权限)。
|