| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re:RE: Developer access in test database
Tom,
That's all well & good. I believe in keeping people be they developers or end users out of matters that they cannot do anything about or just plain have no reason to be mucking about in, like SYS. Now would someone please tell all of those third party apps folks the same thing. I've got another third party application, called Maximo from MRO to install & guess where they want to go first? You got it, SYS. Why, becuase they want their own views buiilt on all of those deep down tables that SYS owns. I'm geting pretty p&^%ed at these clowns who are constantly telling me that they have tons of experience & know what their doing. It figures though, this one supports MicroSlop Sql too. GOD, I really hope that federal court decides to break up Gates & co.
Dick Goulet
____________________Reply Separator____________________ Author: "Mercadante; Thomas F" <NDATFM_at_labor.state.ny.us> Date: 4/12/2002 5:33 AM
Jeff,
Developers should only have access to stuff they need. This does not include SYS stuff. Basically, do you want to be restoring the development database just because somebody was playing with something? Further, who will be blamed for the developers not being able to do their job while you are restoring the db - the developer who screwed it up, or you?
I'm all for giving developers tons of privs in the dev database - up to a point. You need to protect yourself from them ruining your day.
To answer your question, I grant s,i,u,d to the schema tables directly to the user to that they can create stored procs if need be. I then migrate stored procs to the dev schema as need be.
Hope this helps
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
Sent: Friday, April 12, 2002 8:38 AM
To: Multiple recipients of list ORACLE-L
In our test databases, I have always granted select,insert,update,delete any table to the developers.
While yesterday, one updated a "sys" table.
Be non-production, I always felt if it is destroyed can always be recreated.
What table privileges do you grant in "test".
Jeffrey Beckstrom
Database Administrator
Greater Cleveland Regional Transit Authority
1240 W. 6th Street
Cleveland, Ohio 44113
(216) 781-4204
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4912.300" name=GENERATOR></HEAD>
<BODY style="MARGIN-TOP: 2px; FONT: 10pt Courier New; MARGIN-LEFT: 2px">
<DIV><SPAN class=487251912-12042002>Jeff,</SPAN></DIV>
<DIV><SPAN class=487251912-12042002></SPAN> </DIV>
<DIV><SPAN class=487251912-12042002>Developers should only have access to stuff
they need. This does not include SYS stuff. Basically, do you want
to be restoring the development database just because somebody was playing with
something? Further, who will be blamed for the developers not being able
to do their job while you are restoring the db - the developer who screwed it
up, or you?</SPAN></DIV>
<DIV><SPAN class=487251912-12042002></SPAN> </DIV>
<DIV><SPAN class=487251912-12042002>I'm all for giving developers tons of privs
in the dev database - up to a point. You need to protect yourself from
them ruining your day.</SPAN></DIV>
<DIV><SPAN class=487251912-12042002></SPAN> </DIV>
<DIV><SPAN class=487251912-12042002>To answer your question, I grant s,i,u,d to
the schema tables directly to the user to that they can create stored procs if
need be. I then migrate stored procs to the dev schema as need
be.</SPAN></DIV>
<DIV> </DIV>
<DIV><SPAN class=487251912-12042002>Hope this helps</SPAN></DIV>
<P><FONT face=Arial>Tom Mercadante</FONT> <BR><FONT face=Arial>Oracle Certified
Professional</FONT> </P>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT
face=Tahoma>-----Original Message-----<BR><B>From:</B> Jeffrey Beckstrom
[mailto:JBECKSTROM_at_gcrta.org]<BR><B>Sent:</B> Friday, April 12, 2002 8:38
AM<BR><B>To:</B> Multiple recipients of list ORACLE-L<BR><B>Subject:</B>
Developer access in test database<BR><BR></FONT></DIV>
<DIV>In our test databases, I have always granted select,insert,update,delete
any table to the developers.</DIV>
<DIV> </DIV> <DIV>While yesterday, one updated a "sys" table.</DIV> <DIV> </DIV> <DIV>Be non-production, I always felt if it is destroyed can always berecreated.</DIV>
<DIV> </DIV> <DIV>What table privileges do you grant in "test".</DIV> <DIV> </DIV> <DIV>Jeffrey Beckstrom<BR>Database Administrator<BR>Greater Cleveland Regional
Transit Authority<BR>1240 W. 6th Street<BR>Cleveland, Ohio 44113<BR>(216) 781-4204</DIV></BLOCKQUOTE></BODY></HTML>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: dgoulet_at_vicr.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Fri Apr 12 2002 - 09:03:26 CDT
 |
 |