UNLIMITED TABLESPACE in RESOURCE role

Question

Hi all,<br>
It's known that UNLIMITED TABLESPACE is included in RESOURCE role.<br>
My question is: <b>Why I don't see the system privilige UNLIMITED TABLESPACE when I try to display the priviliges granted to that role?</b><br>
SQL> select PRIVILEGE     
  2  from   ROLE_SYS_PRIVS
  3  where
  4   role='RESOURCE'
  5  /
PRIVILEGE
CREATE TYPE
CREATE TABLE
CREATE CLUSTER
CREATE TRIGGER
CREATE OPERATOR
CREATE SEQUENCE
CREATE INDEXTYPE
CREATE PROCEDURE<br>
Also, in the Enterprise Manager, it is shown that a user who is granted the RESOURCE role has the UNLIMITED TABLESPACE. However, when I display the priviliges granted to the RESOURCE role, I don't see the privilige granted to the role.<br>
Oralce DB 10g R2 on Win XP<br><br>
Thanks in advance

Answer 1

Why I don't see the system privilige UNLIMITED TABLESPACE
when I try to display the priviliges granted to that role?Because that privilege cannot be granted to a role, but to a user only, albeit granting RESOURCE role implicitly grants UNLIMITED TABLESPACE, That's why I never grant RESOURCE role directly to a user. See this example.
SYS@db102 SQL> create role user_role;
Role created.
SYS@db102 SQL> grant connect, resource to user_role;
Grant succeeded.
SYS@db102 SQL> create user test1 identified by test1;
User created.
SYS@db102 SQL> grant user_role to test1;
Grant succeeded.
SYS@db102 SQL> conn test1/test1
Connected.
TEST1@db102 SQL> select * from session_privs;
PRIVILEGE
CREATE SESSION
CREATE TABLE
CREATE CLUSTER
CREATE SEQUENCE
CREATE PROCEDURE
CREATE TRIGGER
CREATE TYPE
CREATE OPERATOR
CREATE INDEXTYPE
9 rows selected.
TEST1@db102 SQL> conn / as sysdba
Connected.
SYS@db102 SQL> create user test2 identified by test2;
User created.
SYS@db102 SQL> grant connect,resource to test2;
Grant succeeded.
SYS@db102 SQL> conn test2/test2
Connected.
TEST2@db102 SQL> select * from session_privs;
PRIVILEGE
CREATE SESSION
UNLIMITED TABLESPACE
CREATE TABLE
CREATE CLUSTER
CREATE SEQUENCE
CREATE PROCEDURE
CREATE TRIGGER
CREATE TYPE
CREATE OPERATOR
CREATE INDEXTYPE
10 rows selected.
TEST2@db102 SQL>                                                               The following is from Oracle documentation :
UNLIMITED TABLESPACE
Use an unlimited amount of any tablespace. This privilege overrides any specific quotas assigned. If you revoke this privilege from a user, then the user's schema objects remain but further tablespace allocation is denied unless authorized by specific tablespace quotas. You cannot grant this system privilege to roles.