Re: Active Data Guard with additional permissions

From: Jeff Chirco <backseatdba_at_gmail.com>
Date: Wed, 2 Nov 2016 12:25:59 -0700
Message-ID: <CAKsxbLqPN0Q9rOV8f7uWka_cn4_V1sNNwojiBt9167XSX1NrLA_at_mail.gmail.com>



Yes you are correct Active Data Guard is an extra cost option but I read the other day that now ADG is included with a GoldenGate purchase and that we have for where I wanted to replicate this database.

Thanks.

On Wed, Nov 2, 2016 at 11:51 AM, Matt Adams <MAdams_at_equian.com> wrote:

> I’ve never set up or used Active Data Guard, so I don’t have any real
> practical advice on you particular issue.
>
>
>
> My advice is more general.
>
>
>
> Remember that while Data Guard is included with EE license, I don’t think
> Active Data Guard is. As I recall, it’s an extra license option, and not
> a cheap one at that.
>
>
>
> So, my advice is: make sure your licensed for what you’re doing.
>
>
>
> Matt
>
>
>
> *From:* oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_
> freelists.org] *On Behalf Of *Jeff Chirco
> *Sent:* Wednesday, November 02, 2016 1:48 PM
> *To:* oracle-l_at_freelists.org
> *Subject:* Active Data Guard with additional permissions
>
>
>
> I have developers that are always asking for production query access. I
> was thinking I could setup an Active Data Guard instance, and since one of
> the benefits is to use ADG as a read only reporting database. However I
> don't want users to have select permissions on the tables in primary, only
> the standby. Unless I am wrong I don't believe you can issues grants in a
> physical standby database.
>
> Does anybody have some other creative solution to this? I was thinking
> maybe issuing the grants to a non default role and if possible attach a
> some kind of trigger that would run on a SET ROLE command and then check if
> the instance was primary or not and then allow or not the set role
> command. You think this is possible? Or something else?
>
> Thanks,
>
> Jeff
>
> **** This communication may contain privileged and/or confidential
> information. If you are not the intended recipient, you are hereby notified
> that disclosing, copying, or distributing of the contents is strictly
> prohibited. If you have received this message in error, please contact the
> sender immediately and destroy any copies of this document. ****
>

--
http://www.freelists.org/webpage/oracle-l
Received on Wed Nov 02 2016 - 20:25:59 CET

Original text of this message