Re: add new user to oracle ??

From: Thomas Kellerer <spam_eater_at_gmx.net>
Date: Sat, 31 Jan 2004 10:53:07 +0100
Message-ID: <bvftu4$u94$1@svr7.m-online.net>

Howard J. Rogers schrieb:
> "Thomas Kellerer" <spam_eater_at_gmx.net> wrote in message
> news:bveon3$n50$1_at_svr7.m-online.net...
>

>>Daniel Morgan schrieb:
>>
>>>Do not grant the CONNECT, RESOURCE, OR DBA roles.
>>
>>Why is that?
>>
>>If we should not use those roles, why do they exist in the first place?
>>
>>Thomas

>
>
> "Connect", for example, includes such juicy grants as create view, create
> table, alter session, create cluster, create database link... and most
> people just think they're letting someone connect to their database!!
>
> "Resource" is a bit of a vague term, isn't it... such a shame it happens to
> also include things like 'create procedure'.
>
> Now, you might think that these are not too bad, and therefore you're quite
> happy to use them. Trouble is, Oracle is on record as saying that they're
> deprecated, and that means that at some point in the future, they will
> abolish them. So if you've set up your users with them in the meantime, come
> the day commeth the hour, no-one will be able to do their regular jobs. So
> if you really rather like them, at least do the decent thing and create
> roles which are identical copies of the "bad" ones. Oracle can then do its
> worst in terms of abolishing them, and your database functionality will not
> be affected.
>

Thanks for the detailed answer. Always learning something new...

I use and maintain databases for development purposes only, and I do have to create views, procedures, database links, table, etc.

So I gues my usage is OK :-)

Cheers
Thomas Received on Sat Jan 31 2004 - 03:53:07 CST