Re: need final word on sysdba

"Mark D Powell" <Mark.Powell_at_eds.com> wrote in message news:1138907968.824552.60900_at_f14g2000cwb.googlegroups.com...
> Randy, you need to setup a password file to be able to connect as
> sysdba remotely. Otherwise only local sysdba connects are allowed.
>
> I suggest that you do not give the vendor the sys or system ID's.
> Rather grant DBA to an ID created for the vendor. The vendor should
> not need access to the actual Oracle account and likely just needs a
> slew of database object DDL privileges, that is, system privileges like
> CREATE TABLE, CREATE VIEW, Unlimited Quota, etc.... Some vendors even
> know what privilege their application needs are you can just grant
> these rather than sysdba or even DBA.
>
> HTH -- Mark D Powell --
>

Thanks Mark. Your suggestions make a lot of sense to me. I just had another vendor finally relent and supply a list of required privileges, rather than insist on DBA, for their latest product update.

-- 
Randy Harris
tech at promail dot com
I'm pretty sure I know everything that I can remember.