Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Grants on Fixed Tables.

RE: Grants on Fixed Tables.

From: Jesse, Rich <Rich.Jesse_at_qtiworld.com>
Date: Fri, 01 Mar 2002 08:39:40 -0800
Message-ID: <F001.0041CEA8.20020301083940@fatcity.com>


Because Oracle seems to like to practice security-by-obscurity (stupidly, IMHO). I think a DBA should have complete control of a DB, but also be completely auditable. OpenVMS comes to mind. e.g. You can delete audits in VMS, but the record of your delete is also audited, and the deletion of that audit delete, etc.

Anyway, there are a few ways to get around this "security" if you have access to a DBA account in the DB. Check out http://www.orafaq.com/faqdbase.htm under "How does one switch to another user in Oracle?".

<rant>
Why have security if it can easily be defeated? It just makes my job harder, take longer, and more prone to screwups (human error). And Oracle doesn't audit everything, so a sinister DBA can (almost) completely cover their tracks. Stupid, stupid, stupid.
</rant>

HTH! GL! :)

Rich Jesse                           System/Database Administrator
Rich.Jesse_at_qtiworld.com              Quad/Tech International, Sussex, WI USA


-----Original Message-----
Sent: Friday, March 01, 2002 10:19 AM
To: Multiple recipients of list ORACLE-L

Hello Gurus,

Just curious to know why Oracle does not allow one to grant select privileges on the fixed tables to other users?

Raj
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Jesse, Rich
  INET: Rich.Jesse_at_qtiworld.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Fri Mar 01 2002 - 10:39:40 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US