Re: OK to revoke privileges from SYS or DBA?

From: Michel Cadot <micadot{at}altern{dot}org>
Date: Sun, 5 Dec 2004 08:36:14 +0100
Message-ID: <41b2b993$0$2310$636a15ce@news.free.fr>

"Tom" <tdwilsonng_at_yahoo.com> a écrit dans le message de news:ae755ef4.0412041915.1b30e28e_at_posting.google.com...
> I'm working on a project to secure a database for the government, and
> one of the recommendations from an analysis tool is to remove some
> privileges from SYS or DBA, namely privileges granted with the ADMIN
> option.
>
> Is it safe to change any of the privileges associated with the SYS
> user or DBA role? Is this supported by Oracle?
>
> Thanks,
>
> Tom

You can't revoke any privileges from SYS: he has all the privileges and roles with admin/grant option.
You can drop DBA role and create your own one instead of revoking some privileges from DBA to avoid misunderstandings.

Regards
Michel Cadot Received on Sun Dec 05 2004 - 01:36:14 CST