ACL Binding
In the database, a privilege may be bound to a resource in the following manner:
-
It can be explicitly bound as part of a privilege grant. For example, database object privileges are bound to a resource as part of a privilege grant, such as
GRANTuser_Nupdate ONtable_M. -
It may also be globally bound as part of the privilege definition, such as a system privileges
ALTER SYSTEMorCREATE ANY TABLE, which do not require the resource name as part of their grant statement.
Similarly, a Real Application Security application privilege can be one of these types:
-
Explicitly bound through an ACL and data realms as part of Data Security policies; see Configuring Data Security
-
Globally bound to a resource as part of its definition