| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: How much memory takes roles, MAX_ENABLED_ROLES
Juan,
I am certain that there is some amount of memory required to maintain extra roles, but it is so minimal that you are never likely to care. If your database is so well tuned that a couple of kb worth of memory to store some extra roles is a factor, you would be better off than any other DBA on earth.
I suspect that there are manageability and performance reasons for limiting the number of roles. If you had thousands of roles assigned to a single user, it would be almost impossible to keep track of what that user is really allowed to do. If a user had thousands of roles assigned, Oracle has to do a lot more work to parse a SQL statement (or when a PL/SQL block with current_user authentication is run) because it's a lot more difficult to figure out whether the user has all the necessary privileges.
Justin Cave
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC
-----Original Message-----
From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Juan Cachito Reyes Pacheco
Sent: Monday, March 08, 2004 2:08 PM
To: oracle-l_at_freelists.org
Subject: Re: How much memory takes roles, MAX_ENABLED_ROLES
Thanks Stephane Faroult,
I don't udnerstand how Oracle admin roles
I have the impression there is a formula like
#roles*user*xbytes;
To determine the role memory usage.
Or it is only a way to control
the number of roles your database has.
To avoid as you say, have too much and lose the track of them.
> Juan Cachito Reyes Pacheco wrote:
> >
> > Hi, somebody know why there is parameter MAX_ENABLED_ROLES
> > The first impression I got, is because they take too much memory, so is
> > better limit them.
> > Is there a way to measure the amount of memory they take.
> > ( or "optimize" them??? if this really means something)
> > Thank you :)
> >
>
> As far as memory consumption goes, roles wouldn't be my first worry. I
> agree with you that a huge number of roles is not a good thing, but not
> for the same reason. More basically, you very quickly begin to lose
> track of whom is allowed to do what when you have too many roles.
> One caveat though (got caught once, a long time ago - don't know if it's
> still true, probably), if you have one single admin account which is
> used for everything including creating roles, don't forget that a role
> is given (and by default enabled) to its creator, so your admin account
> may quickly bump into the limit.
>
> --
> Regards,
>
> Stephane Faroult
> Oriole Limited
> ----------------------------------------------------------------
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> ----------------------------------------------------------------
> To unsubscribe send email to: oracle-l-request_at_freelists.org
> put 'unsubscribe' in the subject line.
> --
> Archives are at http://www.freelists.org/archives/oracle-l/
> FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
> -----------------------------------------------------------------
>
-- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html ----------------------------------------------------------------- ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line. -- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------Received on Mon Mar 08 2004 - 16:43:58 CST
 |
 |