Re: DBA Privileges and Developers
From: Nigel Thomas <nigel_cl_thomas_at_yahoo.com>
Date: Fri, 1 Feb 2008 11:47:32 -0800 (PST)
Message-ID: <240853.13792.qm@web58808.mail.re1.yahoo.com>
Date: Fri, 1 Feb 2008 11:47:32 -0800 (PST)
Message-ID: <240853.13792.qm@web58808.mail.re1.yahoo.com>
Lisa
I think the confusion comes because
- auditors are worried about what the DBA can do
- a developer is granted read access to some "DBA" views
- therefore the auditor (or pointy-haired manager) assumes the developer can now do something evil that only a DBA should be allowed to do.
If the DBA_ views were called DEV_ views, and the developer-useful v$ views were packaged differently, I think a lot of these kind of misunderstandings would fade away.
Ah well...
Regards Nigel
-- http://www.freelists.org/webpage/oracle-lReceived on Fri Feb 01 2008 - 13:47:32 CST