Re: Becoming a user - 10g issue

From: <TESTAJ3_at_nationwide.com>
Date: Wed, 20 Aug 2008 13:13:58 -0400
Message-ID: <OFD00D5774.889F3325-ON852574AB.005E995D-852574AB.005EA857@lnotes-gw.ent.nwie.net>


There's a novel concept:

You can't have the password to the application account but you have alter user privilege :)

joe



Phineas says, "Where's Perry?"

"Jared Still" <jkstill_at_gmail.com>
 

Sent by: oracle-l-bounce_at_freelists.org

08/20/2008 01:11 PM
Please respond to jkstill_at_gmail.com

From
"Jared Still" <jkstill_at_gmail.com>

To
cjnewman_at_uillinois.edu
cc
oracle-l_at_freelists.org
Subject
Re: Becoming a user - 10g issue

On Wed, Aug 20, 2008 at 9:56 AM, Newman, Christopher < cjnewman_at_uillinois.edu> wrote:

select 'alter user &1 identified by values '||chr(39)||password||chr(39)||' replace temp;' ?

What does your security department and/or auditors say about doing this?

You don't say what kind of accounts you are logging onto, but if I had to guess I would guess that they are application accounts.

Wouldn't be better to use the password of the account?

And if you are not allowed to have the password, I guess you're not allowed to make changes.

-- 
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist


--
http://www.freelists.org/webpage/oracle-l
Received on Wed Aug 20 2008 - 12:13:58 CDT

Original text of this message