RE: ERD generation tool - Active SCM

Yes, what you describe does work. However, when the person you don't trust is another DBA (Can we think of another name considering this guy is a DBA? Doom Big Ash-Hole?), it's another story.

Lisa Koivu
Oracle Database Administrator
Fairfield Resorts, Inc.
5259 Coconut Creek Parkway
Ft. Lauderdale, FL, USA 33063

> -----Original Message-----
> From: Yechiel Adar [SMTP:adaryechiel_at_hotmail.com]
> Sent: Thursday, May 02, 2002 3:49 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: ERD generation tool - Active SCM
>
> Well Keith
>
> Our solution to the <Doom Phoc (and their siblings)> is:
>
> Do not grant they rights to do any DDL either in test nor in prod.
>
> The dab stuff does all the DDL work.
> Sure it is an added chore, but after tracking down, a few times, tables
> that
> were dropped
> inadvertently by users (their tool did it by itself) we now use the
> following policy:
>
> Every application has two user id's:
> Owner, with password known only to the DBA group.
> User with rights for select, insert, update, delete ONLY.
>
> It works.
>
> Yechiel Adar
> Mehish
>
> ----- Original Message -----
> To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
> Sent: Thursday, May 02, 2002 7:54 PM
>
>
> > Lisa,
> > There is only so much you can control via a model,
> > since it remains a process away from the DB, and
> > cannot be enforced via privileges, etc. So, we are
> > always in the hands of Dom Phoc (and their siblings),
> > who can do "stuff" even in the production database
> > with SQLPLus/TOAD/... Under this schenario, do you
> > sleep well at night?
> >
> > So, we said lets work with our Dom Phoc's. On
> > production databases, we will STRIP them off of the
> > Oracle database passwords. No password, no change.
> > ENFORCED! Now, I can sleep well at night.
> >
> > How? Not via models. Via a solution involving the
> > following, and it seems to be working for us well:
> > ActiveDesigner/ActiveChangeManager/ActiveCompare/A+
> > White Paper:
> > http://www.iraje.com/docs/ActiveSecureDesigner.htm
> >
> > Take charge of the "Dom Phocs" in your org!
> >
> > Keith
> >
> >
> >
> >
> >
> >
> > To: "'ORACLE-L_at_fatcity.com'" <ORACLE-L_at_fatcity.com>,
> > "'keithpson_at_yahoo.com'" <keithpson_at_yahoo.com>
> > Date: Wed, 1 May 2002 16:06:00 -0500
> >
> >
> >
> >
> >
> > Well, for one thing, if your developer, Dom Phoc,
> > starts changing crap
> > in
> > your database (as has happened to me in the past) a
> > compare to the dev
> > model
> > would be great because my development changes would be
> > in the model,
> > not in
> > the test or production databases. In that specific
> > case I had to TRUST
> > him
> > (what? trust him after what he just did?) to change
> > everything back,
> > or
> > restore from a backup, which would have been very time
> > consuming.
> >
> > I was one large ball of raging hormones that day and I
> > took it all out
> > on
> > him. We don't work on the same projects anymore.
> >
> > Lisa Koivu
> > Oracle Database Administrator
> > Fairfield Resorts, Inc.
> > 5259 Coconut Creek Parkway
> > Ft. Lauderdale, FL, USA 33063
> >
> >
> > > -----Original Message-----
> > > From: Keith Peterson [SMTP:keithpson_at_yahoo.com]
> > > Sent: Wednesday, May 01, 2002 5:50 PM
> > > To: Multiple recipients of list ORACLE-L
> > > Subject: RE: ERD generation tool - Active
> > Comparisons
> > >
> > > Am I speaking to the wind ....
> > >
> > > For Compares, why would you compare the MODEL with
> > the
> > > DATABASE...like going from US to London via Tokyo...
> > > ... and you get to pay more, like... you pay not for
> > > distance, but for "time in the air"... If a tool
> > takes
> > > longer to do something, makes more mistakes, is
> > bumpy
> > > and complex... you get to pay more.
> > >
> > > For compares, someone tell me what beats
> > > ActiveCompare:
> > > http://www.iraje.com/compare-diff.htm
> > >
> > > http://www.iraje.com/ActiveCompare_viewlet.html
> > >
> > >
> > > ...and I will switch my tool.
> > >
> > > Keith
> >
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Health - your guide to health and wellness
> > http://health.yahoo.com
> > --
> > Please see the official ORACLE-L FAQ: http://www.orafaq.com
> > --
> > Author: Keith Peterson
> > INET: keithpson_at_yahoo.com
> >
> > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> > San Diego, California -- Public Internet access / Mailing Lists
> > --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
> >
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Yechiel Adar
> INET: adaryechiel_at_hotmail.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Koivu, Lisa
  INET: lisa.koivu_at_efairfield.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).