Re: OK to revoke privileges from SYS or DBA?

From: Frank van Bortel <fvanbortel_at_netscape.net>
Date: Wed, 08 Dec 2004 20:09:56 +0100
Message-ID: <cp7ji1$cmb$1@news4.zwoll1.ov.home.nl>

Howard J. Rogers wrote:
> Anurag Varma wrote:
>

>> So you say that you never really drop the DBA role and that it was 
>> sloppy writing?
>>
>> How about the create database example in your site where you 
>> specifically advise dropping the DBA role?
>>
>> Look at the last section in this page: 
>> http://www.psoug.org/reference/createdb.html
>>
>> How about this?:
>> http://tinyurl.com/4kjle
>>
>> where again you recommend dropping dba, connect and resource role .. 
>> and then claim that this is what oracle recommends!
>>
>>
>> Anurag

>
>
> I think you are being a bit harsh, Anurag. You appear to be expecting a
> level of consistency, competence, accuracy and precision from Daniel
> that is entirely justifiable, but rather ambitious in his particular case.
>

As if this isn't written with a grim smile...

> As he writes elsewhere, he drops these roles and re-creates others which
> contain the same privileges because he doesn't want to run his database
> "with the default role names that the entire world knows." Perfectly
> legitimate, of course... and no doubt, to be consistent, he drops SYS
> and SYSTEM as users, too, since the entire world certainly knows about
> them.
>

He never said that! And he has also admitted he was wrong about the advice to drop the DBA role.
So, it's only naturally you can come up with a link that still has this (now admittingly wrong!) advice.

It's like taking a lolly from a baby.

> It is self-evident that Daniel is somewhat tied up in inconsistent knots
> on this entire matter. It is a little cruel of you to draw attention to
> the fact, don't you think?
>

So did you - by replying.
Get off it, children! Playtime is over, no more playing in the sandbox.

-- 
Regards,
Frank van Bortel

Received on Wed Dec 08 2004 - 13:09:56 CST