Re: Network ACL or not
From: Andrew Kerber <andrew.kerber_at_gmail.com>
Date: Tue, 8 Jul 2014 15:25:11 -0500
Message-ID: <CAJvnOJYts94t=LPMimmXmGJiHozV81Kkf7oVpVxABupBdv0Wug_at_mail.gmail.com>
I have not found any point in it. You have to grant access to the specific procedures that access the network in any case (eg, utl_mail), so adding the additional level of required privilege is simply annoying. Plus, if they user is signing into the database in all probability they already have substantial network access, so all the ACL requirement does is restrict their access going through Oracle.
Date: Tue, 8 Jul 2014 15:25:11 -0500
Message-ID: <CAJvnOJYts94t=LPMimmXmGJiHozV81Kkf7oVpVxABupBdv0Wug_at_mail.gmail.com>
I have not found any point in it. You have to grant access to the specific procedures that access the network in any case (eg, utl_mail), so adding the additional level of required privilege is simply annoying. Plus, if they user is signing into the database in all probability they already have substantial network access, so all the ACL requirement does is restrict their access going through Oracle.
On Tue, Jul 8, 2014 at 2:15 PM, Yong Huang <dmarc-noreply_at_freelists.org> wrote:
> Are there any companies that don't see the value of 11g network ACL
> (access control list) and open up completely so the database behaves like
> pre-11g?
>
-- Andrew W. Kerber 'If at first you dont succeed, dont take up skydiving.' -- http://www.freelists.org/webpage/oracle-lReceived on Tue Jul 08 2014 - 22:25:11 CEST