Re: sysdba role in script

On Feb 8, 1:31 pm, DA Morgan <damor..._at_psoug.org> wrote:
> bofh1..._at_hotmail.com wrote:
> > On Feb 8, 10:33 am, DA Morgan <damor..._at_psoug.org> wrote:
> >> Why are you granting connect? What do you think that accomplishes?
> >> Why are you granting resource?
> >> Why are you mistakenly granting SYSDBA in place of DBA and why would
> >> you grant Harry DBA had you gotten it right in the first place?
>
> >> Don't grant privileges that are unnecessary and dangerous.
> >> --
> >> Daniel A. Morgan
> >> University of Washington
> >> damor..._at_x.washington.edu
> >> (replace x with u to respond)
> >> Puget Sound Oracle Users Groupwww.psoug.org
>
> > I agree. I don't grant unnecessary privileges. The connect and
> > resource privileges weren't used in the script I sent as that was
> > phase 1. When I write scripts I break them down into small complete
> > chucks. This makes debugging easier IMO. Phase 2 is when connect
> > gets used. Phase 4 is when resource gets used.
>
> > In a previous posting Mark said connect and resource are obsolete. Do
> > you know what replaced them?
>
> > Thanks,
>
> My point is that CONNECT should NEVER be used.
> RESOURCE should NEVER be used.
> You are granting privileges that are NEVER necessary.
> --
> Daniel A. Morgan
> University of Washington
> damor..._at_x.washington.edu
> (replace x with u to respond)
> Puget Sound Oracle Users Groupwww.psoug.org- Hide quoted text -
>
> - Show quoted text -

I am glad to see the solution was found. I agree with Daniel, do not grant DBA if the receiver does not need full DBA privileges but instead just grant them the necessary system privileges, like create tablespace, and no more.

HTH -- Mark D Powell -- Received on Fri Feb 09 2007 - 16:52:03 CST