Re: External tables. Security concerns.

artmt_at_hotmail.com wrote:
>> Yes and no. they are correct to not allow uncontrolled use of UTL_FILE
>> but directory objects are harmless and the only real risk with an
>> External Table would be you dumping GB of into a file and using too
>> much disk.
>>
>> Most likely they don't understand the technology because if they did
>> they would know that DIRECTORY OBJECTS are wholly internal to the
>> database.
>> --
>> Daniel A. Morgan
>> University of Washington
>> damorgan_at_x.washington.edu
>> (replace x with u to respond)
>> Puget Sound Oracle Users Group
>> www.psoug.org

> 
> That answers my question about external tables.
> Thanks.
> How about the other components required to implement ETL via external
> tables?
> Would allowing FTP access or NFS mount necessarily jeopardize secutity
> of the Oracle server?

Not necessarily but my instinct would be to say H... no to FTP and I would need to know a lot more about what NFS mounting has to do with anything as it can only be done by root and you sure don't belong there from inside the database.

If in 10g look at using DBMS_FILE_TRANSFER to get and put files.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu
(replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org