| exp/ imp security [message #137849] |
Sat, 17 September 2005 11:08  |
dnvs_praveen
Messages: 47
Registered: July 2005
Location: bangalore
|
Member |
|
|
Hi
I exported scott users all tables into a file called scottschema.dmp and as a demo user i could able to import those tables. So where is security here?
How can scott users tables can be secured from other users?
Plz let me know the answer.
Regards,
praveen
|
|
|
|
| Re: exp/ imp security [message #137861 is a reply to message #137849] |
Sat, 17 September 2005 17:59  |
 |
Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille
|
Senior Member
Account Moderator |
|
|
who is this 'demo' user?
What roles/privs are granted to demo user?
export /import is just a method to transport data.
By default, only the schema owner can export his data.
A dba can export any schema.
So no other regular user (except a dba or a user who has specific roles/privs granted to export any data) is allowed to export data of another user.
So if the data was allowed to be exported, the security was compromised.
Once it was exported, anyone can import it.
oracle@mutation#exp test/test owner=scott
Export: Release 9.2.0.4.0 - Production on Sat Sep 17 18:42:53 2005
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Connected to: Oracle9i Enterprise Edition Release 9.2.0.4.0 - 64bit Production
With the Partitioning option
JServer Release 9.2.0.4.0 - Production
Export done in US7ASCII character set and AL16UTF16 NCHAR character set
server uses WE8ISO8859P1 character set (possible charset conversion)
EXP-00032: Non-DBAs may not export other users
EXP-00000: Export terminated unsuccessfully
>>How can scott users tables can be secured from other users?
With respect to export/import, it is explained above.
Only scott or a dba can do the export.
After the export is done, ofcourse secure the dump file.
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
