6.1.3 Security for Scripts
Because R scripts allow access to the database server, the creation of scripts must be controlled.
The RQADMIN role is a collection of Oracle Database privileges that a user must have to create scripts and store them in the Oracle Machine Learning for R script repository or drop scripts from the repository.
The installation of OML4R on the database server creates the RQADMIN role. The role must be explicitly granted to a user. To grant RQADMIN to a user, start SQL*Plus as sysdba
and enter a GRANT
statement such as the following, which grants the role to the user OML_USER:
GRANT RQADMIN to OML_USER
Note:
You should grant RQADMIN only to those users who need it.
When creating a script, the owner can use the global
argument to specify whether the script is public or private. If global = TRUE
, then all users have read privilege access to the script. If global = FALSE
, which is the default, then the owner can share the script by granting access to other users. The owner can revoke the access at any time.
See Also:
Parent topic: About Oracle Machine Learning for R Embedded R Execution