6.1.3 Security Considerations for Scripts

Because R scripts allow access to the database server, the creation of scripts must be controlled. The RQADMIN role is a collection of Oracle Database privileges that a user must have to create scripts and store them in the Oracle R Enterprise R script repository or drop scripts from the repository.

The installation of Oracle R Enterprise on the database server creates the RQADMIN role. The role must be explicitly granted to a user. To grant RQADMIN to a user, start SQL*Plus as sysdba and enter a GRANT statement such as the following, which grants the role to the user RQUSER:

GRANT RQADMIN to RQUSER

Note:

You should grant RQADMIN only to those users who need it.

When creating a script, the owner can use the global argument to specify whether the script is public or private. If global = TRUE, then all users have read privilege access to the script. If global = FALSE, which is the default, then the owner can share the script by granting access to other users. The owner can revoke the access at any time.