Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Mailing Lists -> Oracle-L -> Re: WILL YOU GIVE PROGRAMMERS DBA ACCOUNT IF WE SAID YES?
--0-1957747793-964555404=:7563
Content-Type: text/plain; charset=us-ascii
I wouldn't. In fact I wouldn't even give them the password to the application schema that holds all of the tables.
Two weeks ago our developers had trouble loading data because of foreign key constraints. Instead of loading in the proper order, they just disabled the constraints. Later when they found that they couldn't re-enable the contraints (because the parent tales in the relationships had bad data), they decided to re-enable them with the novalidate option! A week later when I had to migrate the supposedly clean data data to a production database, fk constrains started blowing up everywhere at the end of the import. I spend several hours tracing down what happened and identifying all of the missing data. From now on, I'll create two schemas for each application. One to hold the tables, and one for everyone to log in with. The 2nd will have insert, update, delete, and select on all of the tables granted directly to it. The only password given out will be the one for the 2nd schema. Nobody will have access to the DBA schema, or the application schema.
"Khedr, Waleed" <Waleed.Khedr_at_FMR.COM> wrote:
-----Original Message-----
[mailto:Donna_M_Vail_at_sd.fisc.navy.mil]
Sent: Monday, July 24, 2000 2:58 PM
To: Multiple recipients of list ORACLE-L
Sending this again, Because I did not have a subject last time.
I sure would appreciate some opinions on this. At my place of work we have
two teams in our division. One team is the application programmers and the
other team is UNIX system/Oracle DBAs. I have a new platform that just
came in. I need to set up the Oracle database and Oracle Application
Server
on it. Here's the question. My application programmer wants the
Oracle
DBA account and the sys account. This platform is not a test platform.
Yes they are developing on this platform and then it will go into
production. My Oracle DBA's do not want to give out the accounts to
the
developers.
Who do I please?
Donna_M_Vail_at_sd.fisc.navy.mil
-- Author: INET: Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-LReceived on Tue Jul 25 2000 - 15:03:24 CDT
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). -- Author: Khedr, Waleed INET: Waleed.Khedr_at_FMR.COM Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). --------------------------------- Do You Yahoo!? Get Yahoo! Mail - Free email you can access from anywhere! --0-1957747793-964555404=:7563 Content-Type: text/html; charset=us-ascii <P> I wouldn't. In fact I wouldn't even give them the password to the application schema that holds all of the tables. </P> <P>Two weeks ago our developers had trouble loading data because of foreign key constraints. Instead of loading in the proper order, they just disabled the constraints. Later when they found that they couldn't re-enable the contraints (because the parent tales in the relationships had bad data), they decided to re-enable them with the novalidate option! A week later when I had to migrate the supposedly clean data data to a production database, fk constrains started blowing up everywhere at the end of the import. I spend several hours tracing down what happened and identifying all of the missing data. From now on, I'll create two schemas for each application. One to hold the tables, and one for everyone to log in with. The 2nd will have insert, update, delete, and select on all of the tables granted directly to it. The only password given out will be the one for the 2nd schema. Nobody will have access to the DBA schema, or the application schema.<BR></P> <P> <B><I>"Khedr, Waleed" <Waleed.Khedr_at_FMR.COM></I></B> wrote: <BR> <BLOCKQUOTE style="BORDER-LEFT: #1010ff 2px solid; MARGIN-LEFT: 5px; PADDING-LEFT: 5px"><BR>-----Original Message-----<BR>[mailto:Donna_M_Vail_at_sd.fisc.navy.mil]<BR>Sent: Monday, July 24, 2000 2:58 PM<BR>To: Multiple recipients of list ORACLE-L<BR><BR><BR>Sending this again, Because I did not have a subject last time.<BR><BR>I sure would appreciate some opinions on this. At my place of work we have<BR><BR>two teams in our division. One team is the application programmers and the<BR><BR>other team is UNIX system/Oracle DBAs. I have a new platform that just <BR>came in. I need to set up the Oracle database and Oracle Application<BR>Server <BR>on it. Here's the question. My application programmer wants the<BR>Oracle <BR>DBA account and the sys account. This platform is not a test platform.<BR><BR>Yes they are developing on this platform and then it will go into <BR>production. My Oracle DBA's do not want to give out the accounts to<BR>the <BR>developers.<BR>Who do I please? <BR>Do! nna_M_Vail_at_sd.fisc.navy.mil<BR><BR><BR>-- <BR>Author: <BR>INET: Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051<BR>San Diego, California -- Public Internet access / Mailing Lists<BR>--------------------------------------------------------------------<BR>To REMOVE yourself from this mailing list, send an E-Mail message<BR>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in<BR>the message BODY, include a line containing: UNSUB ORACLE-L<BR>(or the name of mailing list you want to be removed from). You may<BR>also send the HELP command for other information (like subscribing).<BR>-- <BR>Author: Khedr, Waleed<BR>INET: Waleed.Khedr_at_FMR.COM<BR><BR>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051<BR>San Diego, California -- Public Internet access / Mailing Lists<BR>--------------------------------------------------------------------<BR>To REMOVE yourself from this mailing list, send an E-Mail message<BR>to: ListGuru_at_fatcity.com (note EXAC! T spelling of 'ListGuru') and in<BR>the message BODY, include a line containing: UNSUB ORACLE-L<BR>(or the name of mailing list you want to be removed from). You may<BR>also send the HELP command for other information (like subscribing).</BLOCKQUOTE><p><br><hr size=1><b>Do You Yahoo!?</b><br> Get Yahoo! Mail - Free email you can access from anywhere!