RE: DO I GIVE PROGRAMMERS ORACLE DBA ACCOUNT?

I strongly recommend you DO NOT grant the developers DBA role or SYS.

Instead, grant them SELECT on the dba_ or v$ views they need.

Most developers mean well, but inevitably they are rushed to complete projects and they cut corners. Some developers are downright careless = when
they are in a hurry. In most cases problems will occur because of = mistakes,
or because something was overlooked.

Also with DBA, they can do a tremendous amount of damage to your setup. They can even delete your whole database very quickly. When creating = the
database they can put things in the wrong places, and it will be a = chore to
set things right.

Give them enough leeway that they can get their jobs done without = hassle,
but retain control of your database. Once you give it away you will = never
get it back. You can create a role for them with the privileges they = need,
then revoke it4 once the project is finished. =20

There is a distinction between what people *need* and what people = *want*.

By retaining control of the databases you have an outside view of what = they
are doing, and so are less likely to overlook things.

Will the developers have root or Administrators privileges at the OS = level?
If not, why would they have it at the database level.

If they have root at the OS level, then they are in control of the foundation underlying your database. (It could prove to be a shaky foundation.)

This is my personal opinion as a DBA.

Regards,
Patrice Boivin
Systems Analyst (Oracle Certified DBA)

Systems Admin & Operations | Admin. et Exploit. des syst=E8mes
Technology Services        | Services technologiques
Informatics Branch         | Direction de l'informatique=20
Maritimes Region, DFO      | R=E9gion des Maritimes, MPO

E-Mail: boivinp_at_mar.dfo-mpo.gc.ca <mailto:boivinp_at_mar.dfo-mpo.gc.ca>=20

	-----Original Message-----
	From:	Donna_M_Vail_at_sd.fisc.navy.mil
[SMTP:Donna_M_Vail_at_sd.fisc.navy.mil]
	Sent:	Monday, July 24, 2000 3:58 PM
	To:	Multiple recipients of list ORACLE-L
	Subject:	DO I GIVE PROGRAMMERS ORACLE DBA ACCOUNT?

	Sending this again, Because I did not have a subject last time.

	I sure would appreciate some opinions on this.   At my place of work
we have=20
	two teams in our division.   One team is the application programmers
and the=20
	other team is UNIX system/Oracle DBAs.      I have a new platform
that just=20
	came in.  I need to set up   the Oracle database and Oracle
Application Server=20
	on it.     Here's the question.     My application programmer wants
the  Oracle=20
	DBA account and the sys account.      This platform is not a test
platform.  =20
	Yes they are developing on this platform and then it will go into=20
	production.        My Oracle DBA's do not want to give out the
accounts to the=20
	developers.
	Who do I please?     =20

	--=20
	Author:=20
	  INET: Donna_M_Vail_at_sd.fisc.navy.mil

	Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
	San Diego, California        -- Public Internet access / Mailing
Lists
	--------------------------------------------------------------------
	To REMOVE yourself from this mailing list, send an E-Mail message
	to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
	the message BODY, include a line containing: UNSUB ORACLE-L
	(or the name of mailing list you want to be removed from).  You may