Re: Network ACL or not

From: Andrew Kerber <andrew.kerber_at_gmail.com>
Date: Wed, 9 Jul 2014 08:45:12 -0500
Message-ID: <CAJvnOJa68p0ONFFXxxPhjHN4G62CXf+NNqeOfM+sXCGLhQEW+g_at_mail.gmail.com>

Shameless plug, some time ago I wrote a trigger to add users to the network acl when they were granted execute to utl_mail. Link below, some may find it useful:

http://dbakerber.wordpress.com/2013/06/28/update-to-utl_mail-trigger/

On Wed, Jul 9, 2014 at 2:20 AM, Tim Hall <tim_at_oracle-base.com> wrote:

> I think it's actually a neat feature.
>
> - As Don Seiler says, it gives you an element of control over what the
> database is connecting to. It is good to know and understand the interfaces
> that are being used.
>
> - When the developers ask for something to be opened, it gives you the
> opportunity to discuss their approach to make sure it makes sense. On
> numerous occasions, once I probed a little, I've found they are using a
> totally inappropriate solution. If they had not had to initiate the
> contact, we would have implemented sh*t. :)
>
> I never do a blanket open all ACL (exception on my play VMs).
>
> Cheers
>
> Tim...
>

-- 
Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'

--
http://www.freelists.org/webpage/oracle-l

Received on Wed Jul 09 2014 - 15:45:12 CEST