Re: How to create an oracle which can only export/import data

You could create a dummy user and grant exp_full_database and imp_full_database
role, besides connect to the dummy user. Actually you could give those roles
to a real user too.

Once those are done, use a profile with a password. You can grant the profile
to the user in a C exe which the user would have to run before getting the
privileges. Or you could just grant the role and then take it away later on.

Not sure about the last one. I think the person with imp_full_database would drop
the objects if the import did not contain the objects. However, I don't think the user
can drop the object through an interactive login such as SQL Plus. I could be wrong
here. Have to try this.

Have fun,

Raman Batra

Poorna Prakash wrote:
>
> Hi Folks,
>
> Being an Oracle DBA, I do regular export and occasional import of the
> several schemas in the database. I use the SYSTEM account to do EXP/IMP.
>
> In the event of my temporary absence, I would like to nominate someone
> who is not a dba to do the export and import of several schemas in the
> database, but would not want to share the SYSTEM password.
>
> Is there a way to create an oracle user account, which can do the EXP
> and IMP, but does not have the privilege to drop/delete any object from
> the database? I was looking into granting EXP_FULL_DATABASE &
> IMP_FULL_DATABASE roles to the oracle user, by running the script
> CATEXP.SQL, but I am skeptical about the IMP_FULL_DATABASE role, which
> has DROP privileges assigned to the role, for performing the incremental
> EXP/IMP. Please clarify as I might be wrong.
>
> Any suggestions to achieve the desired result is much appreciated.
>
> Thanks.
>
> -Poorna Prakash
> poorna_prakash_at_sabre.com
Received on Thu Jan 22 1998 - 00:00:00 CST