Home » RDBMS Server » Security » Lock user accounts (Oracle 11.1.0.7.0.7, UNIX_HP)  () 1 Vote
Lock user accounts [message #515583] Tue, 12 July 2011 04:59 Go to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member

Hi,

I have a doubt in locking user account in oracle database.

I was told to drop some unusable users in database which my clients dont require them.I verified the dependent objects of those users but not sure if these users can be dropped.

Instead can i make those user accounts locked so that they cannot connect to database ?

Would there be any impact on database performance if i lock those user accounts?

Is locking an account and dropping users is similar in anyway ?

Need your valuable input.

Thanks

Report message to a moderator

Re: Lock user accounts [message #515588 is a reply to message #515583] Tue, 12 July 2011 05:08 Go to previous messageGo to next message
cookiemonster
Messages: 13958
Registered: September 2008
Location: Rainy Manchester
Senior Member
balaji14 wrote on Tue, 12 July 2011 10:59

Instead can i make those user accounts locked so that they cannot connect to database ?

Yes

balaji14 wrote on Tue, 12 July 2011 10:59

Would there be any impact on database performance if i lock those user accounts?

Why would there be?

balaji14 wrote on Tue, 12 July 2011 10:59

Is locking an account and dropping users is similar in anyway ?

Not really

Report message to a moderator

Re: Lock user accounts [message #515590 is a reply to message #515583] Tue, 12 July 2011 05:11 Go to previous messageGo to next message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
Quote:
Instead can i make those user accounts locked so that they cannot connect to database ?

If you want.

Quote:
Would there be any impact on database performance if i lock those user accounts?

In which way this could be possible?

Quote:
Is locking an account and dropping users is similar in anyway ?

What is your opinion on this?
Is jailing a robber or killing him the same thing?

Regards
Michel

Report message to a moderator

Re: Lock user accounts [message #515591 is a reply to message #515588] Tue, 12 July 2011 05:11 Go to previous messageGo to next message
Littlefoot
Messages: 21823
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
When you lock an account, all you did is to restrict access to it. All its objects (tables, procedures, etc.) are still there (and accessible from other users, if privileges have been granted to them).

If you drop a user, all objects are also dropped.

If these users (that are no longer needed) are not related to other users (for example, their tables used in referential integrity constraints and similar), you might export these schemas, backup export files, and then drop users.

Report message to a moderator

Re: Lock user accounts [message #515598 is a reply to message #515591] Tue, 12 July 2011 05:41 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member


Thank you so much for your answers and advice.. Smile

Report message to a moderator

Re: Lock user accounts [message #515614 is a reply to message #515598] Tue, 12 July 2011 07:33 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member
I have one question here.

Can i drop the same users in production environment as i found out the list of users to be dropped/ their account should be locked based on analyze in test environment ?

Pls advice.

Thanks

Report message to a moderator

Re: Lock user accounts [message #515616 is a reply to message #515614] Tue, 12 July 2011 07:37 Go to previous messageGo to next message
Michel Cadot
Messages: 68716
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
You can drop what you want, it is YOUR environment.

Regards
Michel

Report message to a moderator

Re: Lock user accounts [message #515619 is a reply to message #515616] Tue, 12 July 2011 07:59 Go to previous messageGo to next message
cookiemonster
Messages: 13958
Registered: September 2008
Location: Rainy Manchester
Senior Member
To put it another way - there is no way we can tell if dropping those users will cause issues.
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.

Report message to a moderator

Re: Lock user accounts [message #515785 is a reply to message #515619] Wed, 13 July 2011 04:21 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member

Thank you all for your inputs and advice.

Report message to a moderator

Re: Lock user accounts [message #516182 is a reply to message #515785] Fri, 15 July 2011 06:32 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member
I locked some database accounts based on your advice .I want to find out if there is any impact in database
after locking those no longer used accounts.

Can somebody advice me how to find it out ?

Thanks

[Updated on: Fri, 15 July 2011 06:33]

Report message to a moderator

Re: Lock user accounts [message #516185 is a reply to message #516182] Fri, 15 July 2011 06:53 Go to previous messageGo to next message
ramoradba
Messages: 2457
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
Quote:
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.


As they were locked...no issues....
But if any of the application using those USERS then It(that application wont work) Smile

sriram

Report message to a moderator

Re: Lock user accounts [message #516201 is a reply to message #515619] Fri, 15 July 2011 08:09 Go to previous messageGo to next message
cookiemonster
Messages: 13958
Registered: September 2008
Location: Rainy Manchester
Senior Member
I take it you didn't bother doing this then:
cookiemonster wrote on Tue, 12 July 2011 13:59

It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.


Maybe you should

Report message to a moderator

Re: Lock user accounts [message #516202 is a reply to message #516201] Fri, 15 July 2011 08:10 Go to previous message
cookiemonster
Messages: 13958
Registered: September 2008
Location: Rainy Manchester
Senior Member
And I just noticed sriram quoted that as well. Apologies but I thought it needed emphasising.

Report message to a moderator

Previous Topic: IDLE TIME - not in effect
Next Topic: ORA-20007
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Sat Nov 23 04:26:39 CST 2024
.:: Forum Home :: Blogger Home :: Wiki Home :: Contact :: Privacy ::.