gazzag wrote:
> Sybrand Bakker wrote:
>> So an *ordinary* account with the SELECT ANY TABLE privilege would do,
>> and there is NO BUSINESS CASE for compromising security and misusing
>> SYS.
>>
>> --
>> Sybrand Bakker, Senior Oracle DBA
>
> The SELECT ANY TABLE privilege is overkill and could also compromise
> security. Personally I'd grant SELECT only on the tables actually
> required.
I agree though I think Sybrand is assuming a large number of tables.
Seems to me SYSTEM makes sense, though I am inclined like you to grant
the least possible permissions. But to use SYS is a clear security
violation. Hopefully the OP will change course.
--
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org
Received on Thu Aug 31 2006 - 09:08:11 CDT
