Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: user access to create tables

Re: user access to create tables

From: DA Morgan <damorgan_at_psoug.org>
Date: Wed, 25 Jan 2006 10:48:25 -0800
Message-ID: <1138214902.863713@jetspin.drizzle.com>


Martin Doherty wrote:

>> And destroy any concept of security. Why would you grant someone
>> the privilege to build clusters and database links when all they
>> want to do is create tables?

>
>
> Note the context of the OP request, it's a DB class (probably
> beginners). There is no data to secure (unless the teacher is keeping
> test scores in there) and the instance will probably be dropped after
> the class, so the over-granting of privileges in this context is hardly
> a problem and possibly a help. Obviously students should not receive
> privileges to allow them to SELECT ANY TABLE or DROP ANY USER, since
> that could actually permit cheating or disrupt the progress of the class.
>
> Martin

I did. Which is precisely why it is important to teach best practices not worst practices. If you teach someone that the correct solution to helping someone create tables is GRANT RESOURCE then don't be surprised when they show up in your production shop and do precisely the same thing.

-- 
Daniel A. Morgan
http://www.psoug.org
damorgan_at_x.washington.edu
(replace x with u to respond)
Received on Wed Jan 25 2006 - 12:48:25 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US