Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Usenet -> c.d.o.server -> Re: DBAs, roles and privs
Paul Drake wrote:
> Daniel Morgan <damorgan_at_x.washington.edu> wrote in message news:<1084761358.346651_at_yasure>...
>
>>Marc Blum wrote: >> >> >>>On Sun, 16 May 2004 12:59:40 -0700, Daniel Morgan <damorgan_at_x.washington.edu> >>>wrote: >>> >>> >>> >>>>Then, each and every week revoke the privileges you think most unlikely >>>>to be required and/or most dangerous. When someone complains about >>>>something you'll know the privilege was required and since you will know >>>>which one's you revoked you can provide a two-second fix. Eventually you >>>>will have a role that truly reflects the privs required. >>>> >>>>Other things I would do: >>>>1. Write a DDL trigger that makes it impossible to DROP, ALTER, or >>>>TRUNCATE any object. Code for this can be found at: >>> >>> >>>You're kiddin, aren't you? >>> >>>On a production system? >>> >>>Revoking some privilege and looking what happens? On a mission-critical system? >>> >>>I really don't give a damn if you're working for Boeing or Amazon, this advice >>>is not serious! >>> >>> >>>-- >>>Marc Blum >>>mailto:blumNOSPAM_at_marcblum.de >>>http://www.marcblum.de >> >>Absolutely ... and always! And very serious. >> >>There is no excuse for DROP, ALTER, or TRUNCATE on a production system >>unless it is performed by the DBA.
You don't create GTT's on the fly... Global (the G in GTT).
On commit delete / preserve.
When you log off: no more table.
Is this system available on a variety of server back ends? I am beginning to suspect the programmer(s) / designer does not fully understand GTT's
>
> yes, it would be best if such things ran in one statement, but that is
> not always possible. sometimes, permanent temporary tables need to be
> created, so that they can be analyzed, have indexes on them, etc.
>
> There will be exceptions to such overly wide generalizations (thus
> rendering them invalid).
>
> I think that we've had this discussion before.
>
> Pd
Now I'm lost.. probably, disregarding the 2 paragraphs above
would be most appropriate.
Paul - where did GTT's come in?
You're not dba (the op!) in disguise, are you?
One more fixed tables over GTT's in 9i:
performance bug: inserts/updates on GTT
run much slower than on real tables. :(
Fixed in 10i :)
-- Regards, Frank van BortelReceived on Mon May 17 2004 - 15:03:48 CDT