RE: Database User LIB

From: <Joel.Patterson_at_crowley.com>
Date: Thu, 15 Oct 2009 11:16:33 -0400
Message-ID: <0684DA55864E404F8AD2E2EBDFD557DA0377F264_at_JAXMSG01.crowley.com>



Granting unlimited tablespace is redundant.

You can always lock the account for a time period before you pull the trigger on dropping it, or audit logons.

I don't recognize the account by the name LIB, but the script sure looks like something a vendor would produce. The only surprise is that it didn't grant DBA to LIB.

Is it Oracle 9 or 10? Not that it matters, but 10 pulled some privileges from CONNECT. Otherwise, LIB can pretty much create all his tables/objects/code anyplace it wants and see the data dictionary as well as any other table owned by anyone else.

Pretty powerful account

Joel Patterson
Database Administrator
904 727-2546

-----Original Message-----

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Ingrid Voigt Sent: Thursday, October 15, 2009 10:52 AM To: oracle-l_at_freelists.org
Subject: Database User LIB

Hi,

we've found a user named LIB in one of our production systems (9.2.0.7 EE on Windows) and have no idea where he came from (created after the database and the application schemas) or what he is used for. The customer and application developer do not know this user either.

Nobody connected as LIB in the last few weeks, but there are things that run only rarely.

The schema holds no objects, the create script is CREATE USER LIB
  IDENTIFIED BY PASSWORD MEDIA
  DEFAULT TABLESPACE USERS
  TEMPORARY TABLESPACE TEMP2
  PROFILE DEFAULT
  ACCOUNT UNLOCK;

  • 3 Roles for LIB GRANT CONNECT TO LIB; GRANT RESOURCE TO LIB; GRANT SELECT_CATALOG_ROLE TO LIB; ALTER USER LIB DEFAULT ROLE ALL;
  • 2 System Privileges for LIB GRANT SELECT ANY TABLE TO LIB; GRANT UNLIMITED TABLESPACE TO LIB;
Does anybody know if this is an Oracle default schema for some special purpose? Any other idea how to identify its purpose other than waiting for a year or so?

We would like to drop this user if it can be done without any damage.

Thank you
Ingrid
--

GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
--

http://www.freelists.org/webpage/oracle-l

--

http://www.freelists.org/webpage/oracle-l Received on Thu Oct 15 2009 - 10:16:33 CDT

Original text of this message