Re: Off load create user to user level?

If you have implemented resource control / profiling, then this may not be set correctly for your database if the end user creates the user. Also, the Default and Temporary tablespaces may be incorrect for your database. Finally, they may grant themselves DBA privilege (if this is not protected) and cause all sorts of havoc on the database.

What we did was create a PL/SQL Package owned by a DBA and granted to a special user, then would create an Oracle Database & Application account, whenever the senior Application user wanted to. This took care of the Create User allowing with Tablespaces, the Grants that the user was allowed, updated the Product_User_Profile table (we did not want NON TRUSTED Users inside the database with SQL*Plus), and then created the Application User Profile which was part of the Application security model.

Hope this helps,
Andrew

suisum_at_ecn.ab.ca wrote:

> Hi:
>
> What is the pros and cons if the CREATE USER, GRANT ROLE is off load to
> user level? So that the end user will have full control over users and
> privileges.
>
> --
> Best regards,
Received on Sun May 30 1999 - 19:28:49 CDT