Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: How to monitor schema changes

Re: How to monitor schema changes

From: RSH <RSH_Oracle_at_worldnet.att.net>
Date: Fri, 07 Jun 2002 05:02:41 GMT
Message-ID: <R7XL8.25045$LC3.1895848@bgtnsc04-news.ops.worldnet.att.net>


Roger that.

Developers should absolutely not EVER have authority levels in production that permits them to modify schemas!!!

For that matter, DBA's should not be doing it either!

Turn on database auditing for any and all DDL.

Yeeesh!

And you might wish to run an analysis on all your prod users for the directly granted system privileges, system privileges granted by role inheritance, object privileges, and object privileges granted by role inheritance, access to stored procedures which by virtue of their ownership inherit privileges and the executing user gets them, etc.

Just a thought.

RSH. RSH.
"Steve Ashmore" <sashmore_at_neonramp.com> wrote in message news:ufvrt419v0nub5_at_corp.supernews.com...
> The LAST_DDL_TIME column in
> dba_objects will show you which object has changed.
>
> I would suggest you arrange to have the developers
> rights removed from the production system. It is not
> good practice to let people modift objects in a
> production system.
>
> As Sharon states: Change control...
>
> Stephen C. Ashmore
> Brainbench MVP for Oracle Administration
> http://www.brainbench.com
>
> Author of: 'So You Want to be an Oracle DBA?'
>
> "Rick Denoire" <100.17706_at_germanynet.de> wrote in message
> news:43lvfuo2shp4rhj2p25nbn2cq38th1m21c_at_4ax.com...
> > Hello
> >
> > Users complain to the DB administrator (me) when the DB developer has
> > changed the DB schema so that the SQL queries don't work anymore.
> >
> > Is there a way to monitor changes in the DB schema? I mean when tables
> > or views are renamed, columns are deleted, etc.
> >
> > I thought that doing an export with the option rows=no and comparing
> > this output (which contains all ddl commands) with further similar
> > exports should reveal any changes.
> >
> > In general, what is the best practice in order to avoid this kind of
> > problems caused by changes in the DB schema? (Supposing that such
> > changes are absolutely necessary).
> >
> > Thanks
> > Rick
>
>
Received on Fri Jun 07 2002 - 00:02:41 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US