Re: OK to revoke privileges from SYS or DBA?

I cannot easily follow the thread here or understand exactly what Dan is advocating any longer.

He seems to have acknowledged that recommending dropping the DBA role was a very bad piece of advice.

Many people use these forums as sources of advice and wisdom.

It is probably a good idea not to recommend something like this to others unless it is something that you have done in production and are willing to offer a detailed plan.

Dan, have you dropped CONNECT and RESOURCE roles in production systems or is this something theoretical at this point?

Academic discussions are all well and good but please make an effort to clearly define to an audience that often does not have the background that many of us do how much testing has gone into recommendations such as these. Received on Tue Dec 07 2004 - 08:14:06 CST