Re: SYS vs SYSTEM

What account I use depends on what I am doing. For example to set up roles, grant rights, and create users I use the SYSTEM account. For anything else, I use my DBA account. The reason is that if I ever leave and my account is removed, all those rights that I granted and all the roles that I created would go away. The SYSTEM account will never be removed. We learned this the hard way because we had a DBA leave and we removed his user id.

>>> guy.hammond_at_avt.co.uk 06/15/01 05:55AM >>>
Hi all,  

I generally use SYSTEM rather than SYS for DBA work, and would like to discourage the use of SYS as much as possible. Partly because it bypasses auditing and the profile, and also because I tend to regard SYS as being for Oracle-specific things (like running scripts from $ORACLE_HOME/rdbms/admin) and SYSTEM for doing the day-to-day tasks (like administering storage, performance monitoring etc).  

Does this reasoning make sense? And, what would be a good way to explain it to developers who've gotten used to writing app installation scripts than run as SYS (for example, they might refer to AQ$_AGENT rather than SYS.AQ$_AGENT)?   Thanks,  

g.  

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com 
--
Author: Guy Hammond
  INET: guy.hammond_at_avt.co.uk 

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: William Beilstein
  INET: BeilstWH_at_obg.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).