Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: RE: How to stop access to prod instance ...

Re: RE: How to stop access to prod instance ...

From: Gene Sais <gsais_at_co.palm-beach.fl.us>
Date: Fri, 04 Jan 2002 09:15:57 -0800
Message-ID: <F001.003E7156.20020104083523@fatcity.com>

One quick and easy way is to lock all dev accounts in prod. Or change their passwords, or as mentioned previously revoke their roles/privileges.

>>> Rajendra.Jamadagni_at_espn.com 01/04/02 11:22 AM >>>
Thanks Kimberly,

That is exactly my problem .....

I'd like to investigate this to restrict developers as well .. (yeah I know .... developers have access to production). The most protection level is to drop off developers schema's in production, but we don't want to do that.

I'd surely investigate assigning the roles, but NOT making them active, so you can create the session but can't do much. I think I'll follow up this idea for the time being.

BTW say I want to identify objects which are accessible to users through more than one role ... what is the quickest way to find out? I think I am writing something, but it is unnecessarily complicated. Any pointers for this will be very helpful.

Thanks in advance
Raj



Rajendra Jamadagni MIS, ESPN Inc. Rajendra dot Jamadagni at ESPN dot com
Any opinion expressed here is personal and doesn't reflect that of ESPN Inc.

QOTD: Any clod can have facts, but having an opinion is an art!

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Gene Sais
  INET: gsais_at_co.palm-beach.fl.us

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Fri Jan 04 2002 - 11:15:57 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US