| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: RE: Developer access in test database
Dick,
Boy or boy or boy, do I ever agree with you! And when you talk with these nut-cases, it is obvious that they have no valid reason for doing this other than their lack of experience.
We as professionals are told to put nothing in the SYS account, and then these packages are bought and delivered and we're stuck with'em. really sucks.
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
Sent: Friday, April 12, 2002 9:02 AM
To: Mercadante; Thomas F; Multiple recipients of list ORACLE-L
Tom,
That's all well & good. I believe in keeping people be they developers
or
end users out of matters that they cannot do anything about or just plain
have
no reason to be mucking about in, like SYS. Now would someone please tell
all
of those third party apps folks the same thing. I've got another third
party
application, called Maximo from MRO to install & guess where they want to go
first? You got it, SYS. Why, becuase they want their own views buiilt on
all
of those deep down tables that SYS owns. I'm geting pretty p&^%ed at these
clowns who are constantly telling me that they have tons of experience &
know
what their doing. It figures though, this one supports MicroSlop Sql too.
GOD,
I really hope that federal court decides to break up Gates & co.
Dick Goulet
____________________Reply Separator____________________ Author: "Mercadante; Thomas F" <NDATFM_at_labor.state.ny.us> Date: 4/12/2002 5:33 AM
Jeff,
Developers should only have access to stuff they need. This does not include SYS stuff. Basically, do you want to be restoring the development database just because somebody was playing with something? Further, who will be blamed for the developers not being able to do their job while you are restoring the db - the developer who screwed it up, or you?
I'm all for giving developers tons of privs in the dev database - up to a point. You need to protect yourself from them ruining your day.
To answer your question, I grant s,i,u,d to the schema tables directly to the user to that they can create stored procs if need be. I then migrate stored procs to the dev schema as need be.
Hope this helps
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
Sent: Friday, April 12, 2002 8:38 AM
To: Multiple recipients of list ORACLE-L
In our test databases, I have always granted select,insert,update,delete any table to the developers.
While yesterday, one updated a "sys" table.
Be non-production, I always felt if it is destroyed can always be recreated.
What table privileges do you grant in "test".
Jeffrey Beckstrom
Database Administrator
Greater Cleveland Regional Transit Authority
1240 W. 6th Street
Cleveland, Ohio 44113
(216) 781-4204
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4912.300" name=GENERATOR></HEAD>
<BODY style="MARGIN-TOP: 2px; FONT: 10pt Courier New; MARGIN-LEFT: 2px">
<DIV><SPAN class=487251912-12042002>Jeff,</SPAN></DIV>
<DIV><SPAN class=487251912-12042002></SPAN> </DIV>
<DIV><SPAN class=487251912-12042002>Developers should only have access to
stuff
they need. This does not include SYS stuff. Basically, do you
want
to be restoring the development database just because somebody was playing
with
something? Further, who will be blamed for the developers not being
able
to do their job while you are restoring the db - the developer who screwed
it
up, or you?</SPAN></DIV>
<DIV><SPAN class=487251912-12042002></SPAN> </DIV>
<DIV><SPAN class=487251912-12042002>I'm all for giving developers tons of
privs
in the dev database - up to a point. You need to protect yourself from
them ruining your day.</SPAN></DIV>
<DIV><SPAN class=487251912-12042002></SPAN> </DIV>
<DIV><SPAN class=487251912-12042002>To answer your question, I grant s,i,u,d
to
the schema tables directly to the user to that they can create stored procs
if
need be. I then migrate stored procs to the dev schema as need
be.</SPAN></DIV>
<DIV> </DIV>
<DIV><SPAN class=487251912-12042002>Hope this helps</SPAN></DIV>
<P><FONT face=Arial>Tom Mercadante</FONT> <BR><FONT face=Arial>Oracle
Certified
Professional</FONT> </P>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT
face=Tahoma>-----Original Message-----<BR><B>From:</B> Jeffrey Beckstrom
[mailto:JBECKSTROM_at_gcrta.org]<BR><B>Sent:</B> Friday, April 12, 2002 8:38
AM<BR><B>To:</B> Multiple recipients of list ORACLE-L<BR><B>Subject:</B>
Developer access in test database<BR><BR></FONT></DIV>
<DIV>In our test databases, I have always granted
select,insert,update,delete
any table to the developers.</DIV>
<DIV> </DIV> <DIV>While yesterday, one updated a "sys" table.</DIV> <DIV> </DIV> <DIV>Be non-production, I always felt if it is destroyed can always berecreated.</DIV>
<DIV> </DIV> <DIV>What table privileges do you grant in "test".</DIV> <DIV> </DIV> <DIV>Jeffrey Beckstrom<BR>Database Administrator<BR>Greater ClevelandRegional
Transit Authority<BR>1240 W. 6th Street<BR>Cleveland, Ohio 44113<BR>(216) 781-4204</DIV></BLOCKQUOTE></BODY></HTML>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Mercadante, Thomas F INET: NDATFM_at_labor.state.ny.us Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Fri Apr 12 2002 - 09:53:32 CDT
 |
 |