Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Read Only User

Re: Read Only User

From: Jared Still <jkstill_at_gmail.com>
Date: Thu, 16 Dec 2004 19:15:21 +0000
Message-ID: <bf463804121611157a3f47fd@mail.gmail.com>


This is something that should be handled by the application software.

If this database is ever audited, it will fail the audit by doing this.

The only read only accounts that are acceptable are generally for DBA's and app administrators, and for developers that need to see production data from outside the applicatoin.

Jared

On Thu, 16 Dec 2004 06:51:25 -0800 (PST), Charlotte Hammond <charlottejanehammond_at_yahoo.com> wrote:
> Hi all,
>
> I've been asked to shoehorn a user with "read only" access into a database which wasn't designed to accommodate that.
>
> Creating a role with select only on tables and views was easy but I'm struggling with how to handle packaged functions (which allow indirect access to view data). I can't grant execute on the whole package, as it also contains procedures that allow data changes.
>
> I could create wrapper packages with only the functions exposed, but that looks like a great big maintenance swamp as this isn't a very stable app and the developers keep on changing the package interfaces.
>
> Any easier ideas? (9.2 btw)
>
> Thanks
> - Charlotte
>
> ---------------------------------
> Do you Yahoo!?
> Jazz up your holiday email with celebrity designs. Learn more.
>
> --
> http://www.freelists.org/webpage/oracle-l
>

-- 
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
--
http://www.freelists.org/webpage/oracle-l
Received on Thu Dec 16 2004 - 13:19:27 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US