Oracle-L: RE: Oracle security question

From: DENNIS WILLIAMS <DWILLIAMS_at_LIFETOUCH.COM>
Date: Fri, 11 Jul 2003 12:04:24 -0800
Message-ID: <F001.005C463C.20030711120424@fatcity.com>

Don

If only you can make updates to your Oracle database, then you must enter all the data ;-)

From the tone of your posting, I'm going to assume that you are pretty new to Oracle. You may want to get a good basic administration book like Oracle9i DBA 101.
http://www.amazon.com/exec/obidos/tg/detail/-/0072224746/qid=1057949734/sr=8
-1/ref=sr_8_1/104-2287688-5574335?v=glance&s=books&n=507846
It is also a good idea to always mention your Oracle version and platform (Unix, NT, etc.) in your posts.
First, log in with the SYSTEM username. Then change the password for SYSTEM and SYS with the command:
ALTER USER SYSTEM IDENTIFIED BY xxxxx;
Where xxxxx is your new password.
You should be able to make these changes without affecting any end users. Next you should identify your groups of users and how they access Oracle. Basically you need to identify what their access requirements are and then audit the usernames they use to ensure the privileges granted are just what is required. This is also a good time to see about changing passwords, but first buy the book and read up on the basics of Oracle security.

Dennis Williams
DBA, 80%OCP, 100% DBA
Lifetouch, Inc.
dwilliams_at_lifetouch.com

-----Original Message-----

Sent: Friday, July 11, 2003 2:45 PM
To: Multiple recipients of list ORACLE-L

Hi,

I have a security question about Oracle database. Recently I have taken full control an Oracle database in my department. Now I would like to make sure that no other people except myself can update data in that database. Can somebody tell me what it is necessary steps to do that? Any comments are highly appreciated. Thanks!

Don

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Don Yu
INET: donyu_at_jhu.edu

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: DENNIS WILLIAMS
INET: DWILLIAMS_at_LIFETOUCH.COM

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message