Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: How do you grant connection permission to a user?

Re: How do you grant connection permission to a user?

From: Jack <nospam_at_nospam.com>
Date: Tue, 27 May 2003 06:54:31 GMT
Message-ID: <HYDAa.1256$LM3.317578@news2.telusplanet.net>


If you drop DBA role, you will be performing admin work thru sys or system?

"Daniel Morgan" <damorgan_at_exxesolutions.com> wrote in message news:3ED232D8.2A366215_at_exxesolutions.com...
> Peter wrote:
>
> > How do you grant connection permission to a user?
> > By granting create session privilege?
>
> <RANT>
> Yes this is a rant so if you don't want to read it press the Back button
> now.
>
> GRANT CONNECT TO user is not what allows a user to connect to the
> database. CONNECT is a role, not
> a system privilege. The system privilege is CREATE SESSION.
>
> The misunderstanding around the built-in roles CONNECT, RESOURCE, and
> DBA are great and my advice,
> repeated below as I didn't see all of these answers is for DBAs to drop
> these three roles as soon as they have
> the database installed. Dropping them should be as much a part of the
> installation as is changing the passwords
> for SYS and SYSTEM.
>
> Take a good look at what you give to a use when you grant CONNECT and
> RESOURCE and ask yourself ...
> Why would I want users to have all of these privileges?
>
> I, for one, can't think of any reason I'd want end-users creating
> database links. I can, however, think of many
> reasons why I wouldn't want them to have that privilege.
> </RANT>
> --
> Daniel Morgan
> http://www.outreach.washington.edu/extinfo/certprog/oad/oad_crs.asp
> damorgan_at_x.washington.edu
> (replace 'x' with a 'u' to reply)
>
>
Received on Tue May 27 2003 - 01:54:31 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US