Re: Restricting VPD from SYS

+Senthil

Sent from my iPad

On Aug 30, 2012, at 3:18 PM, Tim Gorman <tim_at_evdbt.com> wrote:

> Deepak,
>
> Short answer: No.
>
> Your problem is not with VPD, but with whoever is connecting to the
> database as SYS. Nobody should be logging into SYS (or connecting "AS
> SYSDBA") except to perform installation, upgrade, patching, etc.
>
> I strongly suggest immediately changing the passwords for all SYSDBA
> database accounts as well as the OS account owning the Oracle
> installation, and lock them out. Then, create non-SYSDBA and non-DBA
> accounts for them to use instead.
>
> Good luck!
>
> -Tim
>
> On 8/30/2012 12:50 PM, Deepak Sharma wrote:

>> Hi,
>> We have VPD enforced on a schema for few tables, but when logged-in as SYS, we can view those table's data.
>> 
>> Is there a way (workaround) to restrict SYS from viewing the VPD-related tables?
>> 
>> Already tried "REVOKE EXEMPT ACCESS POLICY FROM SYS;"
>> 
>> Thanks,
>> Deepak
>> 
>> --
>> http://www.freelists.org/webpage/oracle-l

--
http://www.freelists.org/webpage/oracle-l