or allow modification to the data only through stored procedures . compile
stored procedures in to another schema ( having dmp rites ) . Give execute
privilage to the gateway schema .
- Original Message -----
To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
Sent: Friday, January 10, 2003 12:33 PM
> Val,
>
> One option is to provide access via an account that is not the owner of
> these objects but has all required DML privs but not DDL privs. If you
> cannot do this, you could always code in a Database level trigger for DDL
> and rap the Developer's knuckles when they do something out of turn. We
have
> a similar situation here (common password knowledge) but they know that I
> wield a big stick and have these reports...
>
> John Kanagaraj
> Oracle Applications DBA
> DBSoft Inc
> (W): 408-970-7002
>
> What would you see if you were allowed to look back at your life at the
end
> of your journey in this earth?
>
> ** The opinions and statements above are entirely my own and not those of
my
> employer or clients **
>
>
>
>
> -----Original Message-----
> Sent: Friday, January 10, 2003 11:50 AM
> To: Multiple recipients of list ORACLE-L
>
>
>
> In a n-tier system that connects to the database with JDBC, how does a DBA
> keep developers from modifying the application schema without the DBA's
> consent or knowledge in a centralized development environment?
>
> The developers can have their own personal database on their desktops to
> program/test with but we have a problem with them making changes to the
main
> development database as the application schema owner. They know/have the
> application schema username/password since it is used to make the JDBC
> connections to the database from the app server.
>
> Does anyone have links to defined change control processes that might
help?
>
> Thanks in advance!
> Val
>
> Valerie H. Webber
> Management Systems Designers, Inc
> Database Administrator
> valerie.h.webber_at_irs.gov
> 704-566-5321
>
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: John Kanagaraj
> INET: john.kanagaraj_at_hds.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: BigP
INET: big_planet_2000_at_hotmail.com
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Fri Jan 10 2003 - 20:23:51 CST
