Re: DBMS_JOB - changing default grant

Dusan Bolek wrote:
>
> Hello,
>
> I want to revoke EXECUTE on DBMS_JOB from PUBLIC, because it seems to
> me like a good idea. I think that DBMS_JOB is too dangerous to be
> granted to anybody, Are there any side effects of this? I do now know
> if this grant is not needed for some internal Oracle purposes. I
> haven't find anything on this on Metalink.
>
> Thanks for info
>
> --
> Dusan Bolek
> http://www.db-support.com
>
> Email: spambin_at_seznam.cz
> Pls add "Not Guilty" to the subject, otherwise your email will face an
> unpleasant end as SPAM.

Anything that a user could do with dbms_job they could do directly so I don't see what the issue is.

Conversely, in v10, there is a massive security hole in the new scheduler facility, so don't allow that to be used until you've patched to 10.1.0.3

hth
connor

-- 
Connor McDonald
Co-author: "Mastering Oracle PL/SQL - Practical Solutions"
ISBN: 1590592174

web: http://www.oracledba.co.uk
web: http://www.oaktable.net
email: connor_mcdonald_at_yahoo.com

Coming Soon! "Oracle Insight - Tales of the OakTable"

"GIVE a man a fish and he will eat for a day. But TEACH him how to fish,
and...he will sit in a boat and drink beer all day"

------------------------------------------------------------