Re: no create system tbs ?????

if you have to restrict someone with DBA role from dropping the system ts, take away the dba role since that person EVIDENTLY shouldn't have it.

joe
Sinardy wrote:
>
> Hi all,
>
> In 8i
> Is there a way to restrict user with dba role to drop system tbs ? while not
> interrupting oracle work with that tbs.
> I always think of triggers which is mean we have to protect those
> triggers... to cover security hole : (
> perhaps Just recreating oracle dba role without drop any granted ...
>
> Do you guys have any experience protecting this tbs ?
>
> regards
> Sinardy
>
> -----Original Message-----
> Kirti
> Sent: Monday, 30 July 2001 10:57 PM
> To: Multiple recipients of list ORACLE-L
>
> Joe,
> I tried it already with 9.0.1.
> Won't let you drop system. ORA-1550 jumps out :)
>
> Regards,
>
> - Kirti
>
> > -----Original Message-----
> > From: JOE TESTA [SMTP:JTESTA_at_longaberger.com]
> > Sent: Monday, July 30, 2001 9:20 AM
> > To: Multiple recipients of list ORACLE-L
> > Subject: Re:no create system tbs ?????
> >
> > i thought i tried to "drop" the system tablespace before as an experiment
> > and it didnt work, maybe its an 9i feature, i'll have try it later today.
> > :)
> >
> > Joe
> > working on IOUG 2002 abstracts
> >
> > >>> dgoulet_at_vicr.com 07/30/01 10:05AM >>>
> > No the alter can only work on an existing tablespace. But on a lighter
> > note,
> > from the past, I once had an interviewee who stated that one can "drop and
> > create the system tablespace". Now this is somewhat true as there is no
> > prohibition in Oracle from doing so, but the consequences are (let's just
> > say
> > REAL scary)!!!!!
> >
> > Dick Goulet
> >
> > ____________________Reply Separator____________________
> > Author: "Sinardy" <sinardyxing_at_bcsis.com>
> > Date: 7/27/2001 8:20 PM
> >
> > Hi all,
> >
> > When I am using dbassist to create "create DB script",
> >
> > First of the script is for something like:
> > CREATE DATABASE
> >
> > ..
> > redo bla bla
> > datafile
> > logfile
> >
> > ;
> >
> > Second script
> >
> > ALTER TABLESPACE SYSTEM
> > DEFAULT STORAGE
> >
> > .
> > .
> > .
> > .
> >
> > CREATE TABLESPACE tool
> >
> > ...
> > ..
> >
> > CREATE TABLESPACE rbs
> >
> > ________________________________
> >
> > My question is in second script, where we create the tablespace call
> > system
> > ?
> > alter tablespace will not create tablespace, am I right ?
> >
> >
> > Regards,
> > Sinardy
> >
> >
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Deshpande, Kirti
> INET: kirti.deshpande_at_verizon.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Sinardy
> INET: sinardyxing_at_bcsis.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing)

-- 
Joe Testa  
Performing Remote DBA Services, need some backup DBA support?
For Sale: Oracle-dba.com domain, its not going cheap but feel free to
ask :)
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Joe Testa
  INET: teci_at_the-testas.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).