RE: Re: RE: Re: Stop using SYS, SYSTEM?

-----Original Message-----
Sent: Thursday, November 13, 2003 10:49 PM To: Multiple recipients of list ORACLE-L

<SNIP>
>Stopping someone from using a given set of accounts achieves preciously
>nothing in terms of security (or auditing) IF the functionality of those >accounts
>is then replicated to other accounts.

<SNIP>

Not if someone (I.e. an 'operator') is only using a portion of the access (COMPLETE) that is given to sys and/or system.

>Fact is a DBA needs to be able to exp/imp (debatable, but let's ignore >that).
>And manage rights. And manage space. And manage allocations,
>And monitor the system. And a myriad of other tasks immaterial to the
>point I'm trying to make.

But a user account for Joe DBA and another user account for Jane DBA, etc, etc will provide accountability and tracability, vs a 'public' account does not.

Just my $0.02

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Cupp Michael E Contr Det 1 AFRL/WSI
  INET: Michael.Cupp_at_wpafb.af.mil

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).