Re: ERD generation tool - Active SCM

Well , just to keep things jumping.

Last week I deviated from our rule and gave a responsible user that needed truncate on tables the password for the owner of the schema.

Guess what? Today he comes to me to recreate 2 tables that he dropped.

Go figure.

Yechiel Adar
Mehish

• Original Message ----- To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> Sent: Friday, May 03, 2002 5:53 PM

> Yechiel,
> Yes, I have been there, done that, over and over...
> But then, there is a "Toyota Corolla" solution and
> maybe a "Ferrari Testarosa" solution.
>
> If we can control "Dom Phoc" without tieing his hands
> behind the back, wouldn't that would be the best:
> white paper:
> http://www.iraje.com/docs/ActiveSecureDesigner.htm
>
>
> Keith
>
>
> Date: Thu, 02 May 2002 11:48:38 -0800
> To: "Multiple recipients of list ORACLE-L"
> <ORACLE-L_at_fatcity.com>
> Reply-to: ORACLE-L_at_fatcity.com
> Organization: Fat City Network Services, San Diego,
> California
>
>
>
> Well Keith
>
> Our solution to the <Doom Phoc (and their siblings)>
> is:
>
> Do not grant they rights to do any DDL either in test
> nor in prod.
>
> The dab stuff does all the DDL work.
> Sure it is an added chore, but after tracking down, a
> few times, tables
> that
> were dropped
> inadvertently by users (their tool did it by itself)
> we now use the
> following policy:
>
> Every application has two user id's:
> Owner, with password known only to the DBA group.
> User with rights for select, insert, update, delete
> ONLY.
>
> It works.
>
> Yechiel Adar
> Mehish
>
> ----- Original Message -----
> To: Multiple recipients of list ORACLE-L
> <ORACLE-L_at_fatcity.com>
> Sent: Thursday, May 02, 2002 7:54 PM
>
>
> > Lisa,
> > There is only so much you can control via a model,
> > since it remains a process away from the DB, and
> > cannot be enforced via privileges, etc. So, we are
> > always in the hands of Dom Phoc (and their
> siblings),
> > who can do "stuff" even in the production database
> > with SQLPLus/TOAD/... Under this schenario, do you
> > sleep well at night?
> >
> > So, we said lets work with our Dom Phoc's. On
> > production databases, we will STRIP them off of the
> > Oracle database passwords. No password, no change.
> > ENFORCED! Now, I can sleep well at night.
> >
> > How? Not via models. Via a solution involving the
> > following, and it seems to be working for us well:
> > ActiveDesigner/ActiveChangeManager/ActiveCompare/A+
> > White Paper:
> > http://www.iraje.com/docs/ActiveSecureDesigner.htm
> >
> > Take charge of the "Dom Phocs" in your org!
> >
> > Keith
> >
> >
> >
> >
> >
> >
> > To: "'ORACLE-L_at_fatcity.com'" <ORACLE-L_at_fatcity.com>,
> > "'keithpson_at_yahoo.com'" <keithpson_at_yahoo.com>
> > Date: Wed, 1 May 2002 16:06:00 -0500
> >
> >
> >
> >
> >
> > Well, for one thing, if your developer, Dom Phoc,
> > starts changing crap
> > in
> > your database (as has happened to me in the past) a
> > compare to the dev
> > model
> > would be great because my development changes would
> be
> > in the model,
> > not in
> > the test or production databases. In that specific
> > case I had to TRUST
> > him
> > (what? trust him after what he just did?) to change
> > everything back,
> > or
> > restore from a backup, which would have been very
> time
> > consuming.
> >
> > I was one large ball of raging hormones that day and
> I
> > took it all out
> > on
> > him. We don't work on the same projects anymore.
> >
> > Lisa Koivu
> > Oracle Database Administrator
> > Fairfield Resorts, Inc.
> > 5259 Coconut Creek Parkway
> > Ft. Lauderdale, FL, USA 33063
> >
> >
> > > -----Original Message-----
> > > From: Keith Peterson [SMTP:keithpson_at_yahoo.com]
> > > Sent: Wednesday, May 01, 2002 5:50 PM
> > > To: Multiple recipients of list ORACLE-L
> > > Subject: RE: ERD generation tool - Active
> > Comparisons
> > >
> > > Am I speaking to the wind ....
> > >
> > > For Compares, why would you compare the MODEL with
> > the
> > > DATABASE...like going from US to London via
> Tokyo...
> > > ... and you get to pay more, like... you pay not
> for
> > > distance, but for "time in the air"... If a tool
> > takes
> > > longer to do something, makes more mistakes, is
> > bumpy
> > > and complex... you get to pay more.
> > >
> > > For compares, someone tell me what beats
> > > ActiveCompare:
> > > http://www.iraje.com/compare-diff.htm
> > >
> > > http://www.iraje.com/ActiveCompare_viewlet.html
> > >
> > >
> > > ...and I will switch my tool.
> > >
> > > Keith
>
>
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Health - your guide to health and wellness
> http://health.yahoo.com
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Keith Peterson
> INET: keithpson_at_yahoo.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Yechiel Adar
  INET: adaryechiel_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).