Oracle Database 19c: Security Fundamentals — Lesson 2: Privileges, Roles, Object Access, Rights Models, and Least Privilege

Technical Scope

• system and object privileges
• roles, default roles, and secure-role awareness
• direct grants and PL/SQL rights
• privilege analysis awareness, PUBLIC grants, and least privilege

Instructor Demonstration

Demonstrate system and object privileges inside a legacy database reviewed for broad accounts, PUBLIC grants, audit gaps, and network exposure, then capture the exact configuration, command, transaction, report, or code evidence that proves the result.

Applied Workshop

Implement a controlled workshop covering roles, default roles, and secure-role awareness and direct grants and PL/SQL rights, then test a failure or exception involving privilege analysis awareness, PUBLIC grants, and least privilege.

1. Confirm environment, identity, data, dependencies, and expected result.
2. Complete the product-specific implementation or analysis.
3. Capture commands, configuration, output, logs, transactions, or reports.
4. Explain the operational, security, performance, or business trade-off.

Validation Standard

The Privileges, Roles, Object Access, Rights Models, and Least Privilege result must be reproducible, traceable to approved inputs, and consistent with the expected Oracle product behavior.

• The intended target and ownership are verified.
• The result is supported by reproducible evidence.
• Security, performance, reliability, and support impact are reviewed.
• Unexpected behavior is investigated before acceptance.

Failure Analysis

Diagnose issues in system and object privileges, roles, default roles, and secure-role awareness, direct grants and PL/SQL rights, or privilege analysis awareness, PUBLIC grants, and least privilege without making an unverified production change.

Learners isolate the smallest proven cause, apply a reversible correction, rerun validation, and record the preventive action.