Home » RDBMS Server » Security » Lock user accounts (Oracle 11.1.0.7.0.7, UNIX_HP)  () 1 Vote
Lock user accounts [message #515583] Tue, 12 July 2011 04:59 Go to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member


Hi,

I have a doubt in locking user account in oracle database.

I was told to drop some unusable users in database which my clients dont require them.I verified the dependent objects of those users but not sure if these users can be dropped.

Instead can i make those user accounts locked so that they cannot connect to database ?

Would there be any impact on database performance if i lock those user accounts?

Is locking an account and dropping users is similar in anyway ?

Need your valuable input.

Thanks
Re: Lock user accounts [message #515588 is a reply to message #515583] Tue, 12 July 2011 05:08 Go to previous messageGo to next message
cookiemonster
Messages: 10929
Registered: September 2008
Location: Rainy Manchester
Senior Member
balaji14 wrote on Tue, 12 July 2011 10:59

Instead can i make those user accounts locked so that they cannot connect to database ?

Yes

balaji14 wrote on Tue, 12 July 2011 10:59

Would there be any impact on database performance if i lock those user accounts?

Why would there be?

balaji14 wrote on Tue, 12 July 2011 10:59

Is locking an account and dropping users is similar in anyway ?

Not really
Re: Lock user accounts [message #515590 is a reply to message #515583] Tue, 12 July 2011 05:11 Go to previous messageGo to next message
Michel Cadot
Messages: 58938
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
Instead can i make those user accounts locked so that they cannot connect to database ?

If you want.

Quote:
Would there be any impact on database performance if i lock those user accounts?

In which way this could be possible?

Quote:
Is locking an account and dropping users is similar in anyway ?

What is your opinion on this?
Is jailing a robber or killing him the same thing?

Regards
Michel
Re: Lock user accounts [message #515591 is a reply to message #515588] Tue, 12 July 2011 05:11 Go to previous messageGo to next message
Littlefoot
Messages: 19526
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
When you lock an account, all you did is to restrict access to it. All its objects (tables, procedures, etc.) are still there (and accessible from other users, if privileges have been granted to them).

If you drop a user, all objects are also dropped.

If these users (that are no longer needed) are not related to other users (for example, their tables used in referential integrity constraints and similar), you might export these schemas, backup export files, and then drop users.
Re: Lock user accounts [message #515598 is a reply to message #515591] Tue, 12 July 2011 05:41 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member



Thank you so much for your answers and advice.. Smile
Re: Lock user accounts [message #515614 is a reply to message #515598] Tue, 12 July 2011 07:33 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member

I have one question here.

Can i drop the same users in production environment as i found out the list of users to be dropped/ their account should be locked based on analyze in test environment ?

Pls advice.

Thanks


Re: Lock user accounts [message #515616 is a reply to message #515614] Tue, 12 July 2011 07:37 Go to previous messageGo to next message
Michel Cadot
Messages: 58938
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You can drop what you want, it is YOUR environment.

Regards
Michel
Re: Lock user accounts [message #515619 is a reply to message #515616] Tue, 12 July 2011 07:59 Go to previous messageGo to next message
cookiemonster
Messages: 10929
Registered: September 2008
Location: Rainy Manchester
Senior Member
To put it another way - there is no way we can tell if dropping those users will cause issues.
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.
Re: Lock user accounts [message #515785 is a reply to message #515619] Wed, 13 July 2011 04:21 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member


Thank you all for your inputs and advice.
Re: Lock user accounts [message #516182 is a reply to message #515785] Fri, 15 July 2011 06:32 Go to previous messageGo to next message
Database admin
Messages: 365
Registered: September 2006
Location: india
Senior Member

I locked some database accounts based on your advice .I want to find out if there is any impact in database
after locking those no longer used accounts.

Can somebody advice me how to find it out ?

Thanks

[Updated on: Fri, 15 July 2011 06:33]

Report message to a moderator

Re: Lock user accounts [message #516185 is a reply to message #516182] Fri, 15 July 2011 06:53 Go to previous messageGo to next message
ramoradba
Messages: 2452
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
Quote:
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.


As they were locked...no issues....
But if any of the application using those USERS then It(that application wont work) Smile

sriram
Re: Lock user accounts [message #516201 is a reply to message #515619] Fri, 15 July 2011 08:09 Go to previous messageGo to next message
cookiemonster
Messages: 10929
Registered: September 2008
Location: Rainy Manchester
Senior Member
I take it you didn't bother doing this then:
cookiemonster wrote on Tue, 12 July 2011 13:59

It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.


Maybe you should
Re: Lock user accounts [message #516202 is a reply to message #516201] Fri, 15 July 2011 08:10 Go to previous message
cookiemonster
Messages: 10929
Registered: September 2008
Location: Rainy Manchester
Senior Member
And I just noticed sriram quoted that as well. Apologies but I thought it needed emphasising.
Previous Topic: IDLE TIME - not in effect
Next Topic: ORA-20007
Goto Forum:
  


Current Time: Sun Aug 31 01:28:17 CDT 2014

Total time taken to generate the page: 0.14442 seconds