Re: Restricting access to DBA

From: Mark D Powell <mark.powell_at_eds.com>
Date: 24 Sep 2001 06:53:55 -0700
Message-ID: <178d2795.0109240553.50fcba8@posting.google.com>

chandrut_at_hotmail.com (Chandrasekar Tiruvuru) wrote in message news:<36fbcf56.0109240027.1dd81caa_at_posting.google.com>...
> Hi,
>
> How to restrict access to the DBAs for some tables containing
> confidential information? The version of Oracle that my company runs
> is 8.1.7/8.1.6 running on Aix 4.3.3
>
> Thanks in advance
>
> Chandru

The way your question is worded makes me think you need to review grant/revoke in the SQL manual after reading the DBA Admin manual chapter on managing security.

If you only grant select on the tables to DBA then you have what you want; except, any user with 'select any table' privilege will be able to see the contents.

If the data is truely confidential and 'select any table' has been given to anyone other than a DBA then you can look at using Oracle's encryption package, dbms_obfuscation_toolkit, which was new with release 2 of 8i (8.1.6). This will make the data appear as garbage even to the DBA unless selected out via a decrypt function.

Mark D Powell --

Received on Mon Sep 24 2001 - 08:53:55 CDT