Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: How do you audit a DBA?

RE: How do you audit a DBA?

From: Rachel Carmichael <carmichr_at_hotmail.com>
Date: Thu, 06 Sep 2001 05:56:42 -0700
Message-ID: <F001.0038507F.20010906054039@fatcity.com>

but doesn't there have to be ONE account/role in NT that can assign all the others? how else could you set up a role or continue to set them up?

>From: "Guy Hammond" <guy.hammond_at_avt.co.uk>
>Reply-To: ORACLE-L_at_fatcity.com
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Subject: RE: How do you audit a DBA?
>Date: Thu, 06 Sep 2001 01:20:58 -0800
>
>That is correct. For example, in NT you can assign a role to a user and
>make them a Print Administrator - they can stop and start queues, set
>permissions and priorities and so forth, do anything to do with
>printers, but they can't, say create user accounts. There is another
>role, Backup Operator, who can write any file system to tape, but cannot
>actually open any of those files in an application (unless they're in
>another group that has permission to do so). You can have users who can
>administer users, but can't reset the system time, all sorts of things
>like that, it's quite fine-grained. All this was available in VMS long
>before, of course, I expect NT has it because MS hired a bunch of former
>DEC engineers.
>
>Of course, Unix was developed by academics who had no concept of the
>real world of business, and is woefully inadequate for anything serious,
>but we're stuck with it. DEC's engineering quality was no match for
>Sun's marketing. Oh well.
>
>g
>
>
>-----Original Message-----
>Sent: Wednesday, September 05, 2001 10:06 PM
>To: Multiple recipients of list ORACLE-L
>
>
>Apparently it's possible to seperate certain functions out on NT. I
>don't
>know the details since my NT knowledge is limited to setting up Oracle
>Client software on it.
>
>-----Original Message-----
>Sent: Wednesday, September 05, 2001 4:13 PM
>To: Multiple recipients of list ORACLE-L
>
>
>and the administrator account on a NT system can't do everything too?
>
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>--
>Author: Guy Hammond
> INET: guy.hammond_at_avt.co.uk
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).



Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Rachel Carmichael
  INET: carmichr_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Thu Sep 06 2001 - 07:56:42 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US