Home -> Mailing Lists -> Oracle-L -> RE: Active Data Guard with additional permissions

RE: Active Data Guard with additional permissions

From: Matt Adams <MAdams_at_equian.com>
Date: Wed, 2 Nov 2016 18:51:00 +0000
Message-ID: <97c0daa5eb164cbd854cd5db1933d106_at_wpvl1dag02.hcrec.com> 








I’ve never set up or used Active Data Guard, so I don’t have any real practical advice on you particular issue.



My advice is more general.



Remember that while Data Guard is included with EE license, I don’t think Active Data Guard is.   As I recall, it’s an extra license option, and not a cheap one at that.



So, my advice is:   make sure your licensed for what you’re doing.



Matt



From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Jeff Chirco
Sent: Wednesday, November 02, 2016 1:48 PM
To: oracle-l_at_freelists.org


Subject: Active Data Guard with additional permissions



I have developers that are always asking for production query access.  I was thinking I could setup an Active Data Guard instance, and since one of the benefits is to use ADG as a read only reporting database.  However I don't want users to have select permissions on the tables in primary, only the standby.  Unless I am wrong I don't believe you can issues grants in a physical standby database.



Does anybody have some other creative solution to this?  I was thinking maybe issuing the grants to a non default role and if possible attach a some kind of trigger that would run on a SET ROLE command and then check if the instance was primary or not and then allow or not the set role command.  You think this is possible? Or something else?
Thanks,


Jeff


**** This communication may contain privileged and/or confidential information. If you are not the intended recipient, you are hereby notified that disclosing, copying, or distributing of the contents is strictly prohibited. If you have received this message in error, please contact the sender immediately and destroy any copies of this document. ****



--
http://www.freelists.org/webpage/oracle-l


Received on Wed Nov 02 2016 - 19:51:00 CET












Original text of this message