| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re: Financials and APPS password
SarbOx ( Sarbanes Oxley) will change this behavior.
Users and developers will be more limited.
There should be a way to limit DBA's and sysadmins as well.
Data encryption at the db level is the only way I can think of to prevent that, short of locking out the admins.
Jared
"Jay Hostetter" <jhostetter_at_decommunications.com>
Sent by: ml-errors_at_fatcity.com
10/15/2003 07:29 AM
Please respond to ORACLE-L
To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
cc:
Subject: Re: Financials and APPS password
April,
We lost this battle with our developers - they have the password, along
with strict instructions to "behave."
Nobody else should have the password to any of the schemas (APPS, GL,
INV, etc.). We create logins for users that need them and grant the
necessary rights to objects. As you know, APPS can do just about anything
in the database, so you're asking for trouble if you let the whole company
in there. Chances are you already have some objects in that schema like
MICROSOFTDTPROPERTIES.
Jay
>>> AWells_at_csedge.com 10/15/03 08:39AM >>>
Okay, anyone using Financials... E-Business suite... Oracle 11i...
whatever
you want to call it...
I am trying to apply SOME kind of security to my databases. It appears
that
it is critical for everyone to be able to access production using the APPS
id.... Finance and accounting people, developers, everyone. What does
everyone else do in their setups? The newest reason is the need to run
the
new Mass Additions Trace which apparently requires that you use the apps
id.
We have found a way to set up any user with a read only version of what
APPS
has (since they have to be able to compile reports in production and
access
production data live rather than a month old clone), but Oracle says that
you need to run Mass Additions Trace as apps.
Does anyone let the entire company have the production apps user's password?
April Wells
Oracle DBA/Oracle Apps DBA
Corporate Systems
Amarillo Texas
/\
/ \
/ \ \ /
\
>\<
\
The information contained in this communication, including attachments, is
strictly
confidential and for the intended use of the addressee only; it may also
contain
proprietary, price sensitive, or legally privileged information. Notice is
hereby given that
any disclosure, distribution, dissemination, use, or copying of the
information by anyone
other than the intended recipient is strictly prohibited and may be
illegal. If you have
received this communication in error, please notify the sender immediately
by reply e-mail,
delete this communication, and destroy all copies.
Corporate Systems, Inc. has taken reasonable precautions to ensure that
any attachment to
this e-mail has been swept for viruses. We specifically disclaim all
liability and will
accept no responsibility for any damage sustained as a result of software
viruses and advise
you to carry out your own virus checks before opening any attachment.
**DISCLAIMER
This e-mail message and any files transmitted with it are intended for the
use of the individual or entity to which they are addressed and may
contain information that is privileged, proprietary and confidential. If
you are not the intended recipient, you may not use, copy or disclose to
anyone the message or any information contained in the message. If you
have received this communication in error, please notify the sender and
delete this e-mail message. The contents do not represent the opinion of
D&E except to the extent that it relates to their official business.
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jay Hostetter INET: jhostetter_at_decommunications.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: INET: Jared.Still_at_radisys.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Wed Oct 15 2003 - 16:04:24 CDT
 |
 |