The reason he mentioned this is that Oracle has been saying for some
time now that these predefined roles were provided for "backward
compatibility" to earlier database versions. However, they're never
actually stated that they would drop support of these predefined roles,
and in fact, go on to state in the Database Concepts Guide that these
roles "... can be modified in the same manner as any other role in an
Oracle database" which almost implies that we can feel free to continue
using these roles and modifying them to best suit our needs.
Instead of CONNECT, you use CREATE SESSION. The problem is that CONNECT
is a nice and handy single role for about 8 privileges typically used by
a common userid. We could always create our own version of CONNECT, but
why bother with it when Oracle is still doing it for us? Eventually,
Oracle may tell us that to upgrade, we may need to change these roles,
but I don't think we're going to see that anytime real soon.
> -----Original Message-----
> From: chuckh_at_safeaccess.net (Chuck Hamilton)
> [SMTP:chuckh_at_safeaccess.net]
> Posted At: Friday, January 29, 1999 10:57 AM
> Posted To: comp.databases.oracle.server
> Conversation: sqlplus small doubt
> Subject: Re: sqlplus small doubt
>
> So why are CONNECT, RESOURCE, and DBA roles all obsolete on Oracle 7?
> Without CONNECT, a user can't connect to the database.
>
> The only time I don't grant CONNECT to a user is if that's the user
> the owns the applications tables. I only occasionally give that user
> connect privileges if I need to do maintenance. Like grant access to
> his tables to a new role or user. Then I revoke it as soon as I'm
> done.
>
> Chuck
>
> On Fri, 29 Jan 1999 15:32:37 -0000, "Jonathan Lewis"
> <jonathan_at_jlcomp.demon.co.uk> wrote:
>
> >
> >
> >Hint: It is a common error in almost all Oracle 7 and 8 installation
> to
> >make use of the obsolete CONNECT, RESOURCE and DBA roles
> >when creating Oracle accounts. You should review the requirements
> >of your site and create roles which are relevant.
> >
> >
> >Jonathan Lewis
> >Yet another Oracle-related web site: www.jlcomp.demon.co.uk
> >
> >
> >
> >
> >
> >
> >kvsraju_at_usa.net wrote in message <78ro5s$sed$1_at_nnrp1.dejanews.com>...
> >>I have my Oracle 8.0.3.0 database running on windows nt platform.
> >>All my users,they will be connected to database using an account,say
> TEST1
> >>Now i want to make sure that all the users cann't drop tables.
> >>How is it possible?
> >>there is no command called DROP TABLE to disable the user.
> >>so i want to control through sql*plus
> >>How is it possible.
> >>I came to know that we have change user product profile file.But i
> am not
> >sure
> >>about it
> >>
> >>-----------== Posted via Deja News, The Discussion Network
> ==----------
> >>http://www.dejanews.com/ Search, Read, Discuss, or Start Your
> Own
> >
>
> --
> Chuck Hamilton
> chuckh_at_safeaccess.net
>
> Never share a foxhole with anyone braver than yourself!
Received on Fri Jan 29 1999 - 12:04:03 CST
