Re: Big company, little error

From: Jared Still <jkstill_at_cybcon.com>
Date: Sun, 07 Nov 2004 22:22:01 -0800
Message-ID: <pan.2004.11.08.06.22.01.859043@cybcon.com>

On Sat, 06 Nov 2004 04:59:25 -0800, DA Morgan wrote:

>> GRANT CONNECT, RESOURCE TO user;
>> or
>> GRANT DBA TO user;
>> 
>> Hope that helps ...

>
> It is highly recommended that no one ever grant these roles to anyone
> except for purposes of training. Oracle, in fact, advises treating them
> like SCOTT/TIGER which means dropping them on installation. They do not
> belong in a production database.
>
> The correct thing to do is to create your own roles and then grant the
> specific privileges required.
>
> Go to http://www.psoug.org
> click on Morgan's Library
> click on System Privileges

While I have no doubt that creating your own roles is a good idea, especially in the case of the RESOURCE role with its UNLIMITED TABLESPACE privilege, I can't recall seeing this recommendation from Oracle.

Is there a Metalink Note # or something to refer to on this?

Jared Received on Mon Nov 08 2004 - 00:22:01 CST