052-154

View the Exhibit and examine the privileges granted to the MGR_ROLE role.



The user SKD has been granted the CONNECT and RESOURCE roles only. The database administrator(DBA) grants MGR_ROLE to the user SKD by executing the command:
SQL> GRANT MGR_ROLE TO SKD WITH ADMIN OPTION;
Which statement is true about the user SKD after he/she is granted this role?
A.The user SKD can grant only the MGR_ROLE role to other users, but not the privileges in it.
B.The user SKD can revoke the MGR_ROLE only from the users for whom he/she is the grantor.
C.The user SKD can grant the privileges in the MGR_ROLE role to other users, but not with ADMIN OPTION.
D.The user SKD can grant the privileges in the MGR_ROLE role to other users, but cannot revoke privileges from them.

WITH ADMIN OPTION 的意思是被授予该权限的用户有权将某个权限(如 MGR_ROLE)授予其他用户或角色，取消是不级联的。
A 正确，可以授权给 MGR_ROLE 给别的用户，但不能把 MGR_ROLE 里面的权限如 create user 授权给别的用户。
B 错误，可以级联回收，可以回收不是 SKD 自己授予的。
C 错，错误。 The user SKD can grant the privileges in the MGR_ROLE role to other users。根据 A 答案，SKD 不能将 MGR_ROLE 角色里的权限给别的用户。
D,也可以回收权限。