privileges

From: Koivu, Lisa <lkoivu_at_qode.com>
Date: Thu, 21 Sep 2000 16:03:33 -0400
Message-Id: <10626.117597@fatcity.com>

This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible.

------_=_NextPart_001_01C02407.056E3FBA
Content-Type: text/plain;

charset="iso-8859-1"

I inherited a database and application that was developed using the famous 'smear' method of privileges. In other words, everybody has access to anything to do whatever they please.

It's time I cleaned this up. I have no guidelines to work from and quite honestly don't know the application too well - I have written a minute amount of code for this app. I'm thinking I could sift through dba_source as a starting point, to see whose procedures are accessing stuff outside their schema, etc. Man, this is going to be a big, tedious, messy trial-and-error nightmare.

If anyone has done anything similar and has any suggestions I would be very happy to hear them.

Thanks

Lisa Rutland Koivu
Oracle Database Administrator
Qode.com
4850 North State Road 7
Suite G104
Fort Lauderdale, FL 33319

V: 954.484.3191, x174
F: 954.484.2933 
C: 954.658.5849

http://www.qode.com

"The information contained herein does not express the opinion or position of Qode.com and cannot be attributed to or made binding upon Qode.com."

------_=_NextPart_001_01C02407.056E3FBA
Content-Type: text/html;

charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2650.12">
<TITLE>privileges</TITLE>
</HEAD>
<BODY>

I inherited a database and application =
that was developed using the famous 'smear' method of privileges.  = In other words, everybody has access to anything to do whatever they = please.

It's time I cleaned this up.  I =
have no guidelines to work from and quite honestly don't know the = application too well - I have written a minute amount of code for this = app.  I'm thinking I could sift through dba_source as a starting = point, to see whose procedures are accessing stuff outside their = schema, etc.  Man, this is going to be a big, tedious, messy = trial-and-error nightmare.

If anyone has done anything similar =
and has any suggestions I would be very happy to hear them. 


Thanks


Lisa Rutland Koivu
 Oracle Database Administrator
 Qode.com
 4850 North State Road 7
 Suite G104
 Fort Lauderdale, FL  =
33319


V: 954.484.3191, x174
 F: 954.484.2933 
 C: 954.658.5849
 <A HREF=3D"http://www.qode.com" =
TARGET=3D"_blank">http://www.qode.com</A>


"The =
information contained herein does not express the opinion or position = of Qode.com and cannot be attributed to or made binding upon = Received on Thu Sep 21 2000 - 15:03:33 CDT