Home » RDBMS Server » Security » Read Privlige on Code
Read Privlige on Code [message #270621] Thu, 27 September 2007 12:07 Go to next message
faiz_hyd
Messages: 294
Registered: February 2006
Senior Member
Hi,

APP owner Owns The Objects ( tables / Views / Packages )


APP Owner Grants select,insert,update on the above objects to USER_ROLE.

User_role is assigned as default role to User_Account.
User account creates synonyms on the assigned table/view/packges and uses the synonyms.
The front end web based applications connects with User_account and it's all fine working.

Now developers on Support needs an account to work on issues, they need access like insert into tables ( some times very rare but requires ), Update the data ( some times very rare but requires ), and wants to view code from packages, How should this be accomplished,
If we give User_account the Risk management team has concerns and objects saying developer should not use the web account and the Application interface,

If i set up a read role having read on tables/viewthen how can they see the code.

it's on oracle 10g Rel 2.


Thanks
Re: Read Privlige on Code [message #270622 is a reply to message #270621] Thu, 27 September 2007 12:15 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
>If i set up a read role having read on tables/viewthen how can they see the code.
By checking out a copy from the source code control system.
You do have & use one for production code? Right?
Re: Read Privlige on Code [message #270626 is a reply to message #270622] Thu, 27 September 2007 12:29 Go to previous message
faiz_hyd
Messages: 294
Registered: February 2006
Senior Member
Thanks for quick response,

yes we do have code in source system.


Thanks
Previous Topic: decrypting password
Next Topic: PUBLIC Mistery
Goto Forum:
  


Current Time: Wed Dec 04 13:29:46 CST 2024