Re: Stop using SYS, SYSTEM?

You would require SYS to carry out tasks like 1. grant execute on dbms_package to <user> 2. grant select on v_$view to <user>
Whether to have these things granted to PUBLIC is always debatable. ......
......
Tell this to your auditing. And what they suggest too does not seem to hold water.

HTH
GovindanK
Oracle Certified Professional(8,8i)
Brainbench Certified Master DBA(8)

On Wed, 12 Nov 2003 12:04:35 -0800, "Smith, Ron L." <rlsmith_at_kmg.com> said:
> We are being asked by Auditing to stop using the SYS, and SYSTEM
> accounts. They would like for us to create an Oracle Role with the same
> permissions a SYS and SYSTEM, then grant the role to each of the DBA's.
> Don't ask me why. Nothing is being audited in 99% of the databases.
> They just say it in a paper some where so they said we shouldn't use it.
> This seems like it would cause lots of problems with exports, imports,
> installs, etc... Has anyone had to deal with this type of request? Any
> potential problems with making the change?
>
> Thanks!
> Ron Smith

-- 
http://www.fastmail.fm - Access your email from home and the web
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: GovindanK
  INET: gkatteri_at_fastmail.fm

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).