Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
![]() |
![]() |
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Re: RE: Re: Stop using SYS, SYSTEM?
-----Original Message-----
Sent: Thursday, November 13, 2003 10:49 PM
To: Multiple recipients of list ORACLE-L
<SNIP>
>Stopping someone from using a given set of accounts achieves preciously
>nothing in terms of security (or auditing) IF the functionality of those >accounts
>is then replicated to other accounts.
<SNIP>
Not if someone (I.e. an 'operator') is only using a portion of the access (COMPLETE) that is given to sys and/or system.
>Fact is a DBA needs to be able to exp/imp (debatable, but let's ignore >that).
>And manage rights. And manage space. And manage allocations,
>And monitor the system. And a myriad of other tasks immaterial to the
>point I'm trying to make.
But a user account for Joe DBA and another user account for Jane DBA, etc, etc will provide accountability and tracability, vs a 'public' account does not.
Just my $0.02
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Cupp Michael E Contr Det 1 AFRL/WSI INET: Michael.Cupp_at_wpafb.af.mil Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Fri Nov 14 2003 - 07:09:25 CST
![]() |
![]() |