OraFAQ Forum: Security » Lock user accounts

Home » RDBMS Server » Security » Lock user accounts (Oracle 11.1.0.7.0.7, UNIX_HP) (

) 1 Vote

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Lock user accounts [message #515583]

Tue, 12 July 2011 04:59

Database admin
Messages: 365
Registered: September 2006
Location: india

Senior Member

Hi,

I have a doubt in locking user account in oracle database.

I was told to drop some unusable users in database which my clients dont require them.I verified the dependent objects of those users but not sure if these users can be dropped.

Instead can i make those user accounts locked so that they cannot connect to database ?

Would there be any impact on database performance if i lock those user accounts?

Is locking an account and dropping users is similar in anyway ?

Need your valuable input.

Thanks

Report message to a moderator

Re: Lock user accounts [message #515588 is a reply to message #515583]

Tue, 12 July 2011 05:08

cookiemonster
Messages: 13966
Registered: September 2008
Location: Rainy Manchester

Senior Member

balaji14 wrote on Tue, 12 July 2011 10:59

Instead can i make those user accounts locked so that they cannot connect to database ?

Yes

balaji14 wrote on Tue, 12 July 2011 10:59

Would there be any impact on database performance if i lock those user accounts?

Why would there be?

balaji14 wrote on Tue, 12 July 2011 10:59

Is locking an account and dropping users is similar in anyway ?

Not really

Report message to a moderator

Re: Lock user accounts [message #515590 is a reply to message #515583]

Tue, 12 July 2011 05:11

Michel Cadot
Messages: 68757
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Quote:

Instead can i make those user accounts locked so that they cannot connect to database ?

If you want.

Quote:

Would there be any impact on database performance if i lock those user accounts?

In which way this could be possible?

Quote:

Is locking an account and dropping users is similar in anyway ?

What is your opinion on this?
Is jailing a robber or killing him the same thing?

Regards
Michel

Report message to a moderator

Re: Lock user accounts [message #515591 is a reply to message #515588]

Tue, 12 July 2011 05:11

Littlefoot
Messages: 21823
Registered: June 2005
Location: Croatia, Europe

Senior Member
Account Moderator

When you lock an account, all you did is to restrict access to it. All its objects (tables, procedures, etc.) are still there (and accessible from other users, if privileges have been granted to them).

If you drop a user, all objects are also dropped.

If these users (that are no longer needed) are not related to other users (for example, their tables used in referential integrity constraints and similar), you might export these schemas, backup export files, and then drop users.

Report message to a moderator

Re: Lock user accounts [message #515598 is a reply to message #515591]

Tue, 12 July 2011 05:41

Database admin
Messages: 365
Registered: September 2006
Location: india

Senior Member

Thank you so much for your answers and advice.. Smile

Report message to a moderator

Re: Lock user accounts [message #515614 is a reply to message #515598]

Tue, 12 July 2011 07:33

Database admin
Messages: 365
Registered: September 2006
Location: india

Senior Member

I have one question here.

Can i drop the same users in production environment as i found out the list of users to be dropped/ their account should be locked based on analyze in test environment ?

Pls advice.

Thanks

Report message to a moderator

Re: Lock user accounts [message #515616 is a reply to message #515614]

Tue, 12 July 2011 07:37

Michel Cadot
Messages: 68757
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You can drop what you want, it is YOUR environment.

Regards
Michel

Report message to a moderator

Re: Lock user accounts [message #515619 is a reply to message #515616]

Tue, 12 July 2011 07:59

cookiemonster
Messages: 13966
Registered: September 2008
Location: Rainy Manchester

Senior Member

To put it another way - there is no way we can tell if dropping those users will cause issues.
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.

Report message to a moderator

Re: Lock user accounts [message #515785 is a reply to message #515619]

Wed, 13 July 2011 04:21

Database admin
Messages: 365
Registered: September 2006
Location: india

Senior Member

Thank you all for your inputs and advice.

Report message to a moderator

Re: Lock user accounts [message #516182 is a reply to message #515785]

Fri, 15 July 2011 06:32

Database admin
Messages: 365
Registered: September 2006
Location: india

Senior Member

I locked some database accounts based on your advice .I want to find out if there is any impact in database
after locking those no longer used accounts.

Can somebody advice me how to find it out ?

Thanks

[Updated on: Fri, 15 July 2011 06:33]

Report message to a moderator

Re: Lock user accounts [message #516185 is a reply to message #516182]

Fri, 15 July 2011 06:53

ramoradba
Messages: 2457
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...

Senior Member

Quote:

It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.

As they were locked...no issues....
But if any of the application using those USERS then It(that application wont work) Smile

sriram

Report message to a moderator

Re: Lock user accounts [message #516201 is a reply to message #515619]

Fri, 15 July 2011 08:09

cookiemonster
Messages: 13966
Registered: September 2008
Location: Rainy Manchester

Senior Member

I take it you didn't bother doing this then:
cookiemonster wrote on Tue, 12 July 2011 13:59

It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.

Maybe you should

Report message to a moderator

Re: Lock user accounts [message #516202 is a reply to message #516201]

Fri, 15 July 2011 08:10

cookiemonster
Messages: 13966
Registered: September 2008
Location: Rainy Manchester

Senior Member

And I just noticed sriram quoted that as well. Apologies but I thought it needed emphasising.

Report message to a moderator

Previous Topic:	IDLE TIME - not in effect
Next Topic:	ORA-20007

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun May 04 08:28:48 CDT 2025