Which three statements are true about the working of system privileges in a multitenant
control database (CDB) that has pluggable databases (PDBs)?
A.
Common users connected to a PDB can exercise privileges across other PDBs.
B.
System privileges with the with grant option container all clause must be granted to a
common user before the common user can grant privileges to other users.
C.
Local users cannot use local system privileges on the schema of a common user.
D.
System privileges apply only to the PDB in which they are used.
E.
The granter of system privileges must possess the set container privilege.
Handley says:
December 5, 2014 at 9:35 am
Take the exam today, the question changed to ‘Which two …’ and option does not seem to change
So -> CD
Also C and D
https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG590
“How Commonly Granted System Privileges Work
Users can exercise system privileges only within the PDB in which they were granted.”
“With the appropriate privileges, a local user can access objects in a common user’s schema. For example, a local user can access a table within the schema of a common user if the common user has granted the local user privileges to access it.”
So D is definitely correct.
The above also implies that local system privileges are not enough to access a common user’s objects – the common user must grant them directly. So C looks correct too.