Re: "Write once-Read many" table ?
From: DA Morgan <damorgan_at_psoug.org>
Date: Thu, 28 Feb 2008 08:39:55 -0800
Message-ID: <1204216794.100780@bubbleator.drizzle.com>
>> On Wed, 27 Feb 2008 07:16:05 -0800, jm.scheiwiler wrote:
>>> Hello,
>>> For legal reasons, we would like to create tables where one can insert,
>>> select but never never delete nor update.
>>> I know we can prevent delete and update with revoke grants or with
>>> triggers but this is not satisfactory because grants can be re-granted
>>> and triggers can be dropped.
>> You have to trust your DBA. That's the bottom line.
>>
>> --http://mgogala.freehostia.com
Date: Thu, 28 Feb 2008 08:39:55 -0800
Message-ID: <1204216794.100780@bubbleator.drizzle.com>
jm.scheiwiler_at_gmail.com wrote:
> On Feb 27, 6:17 pm, Mladen Gogala <mgog..._at_yahoo.com> wrote:
>> On Wed, 27 Feb 2008 07:16:05 -0800, jm.scheiwiler wrote:
>>> Hello,
>>> For legal reasons, we would like to create tables where one can insert,
>>> select but never never delete nor update.
>>> I know we can prevent delete and update with revoke grants or with
>>> triggers but this is not satisfactory because grants can be re-granted
>>> and triggers can be dropped.
>> You have to trust your DBA. That's the bottom line.
>>
>> --http://mgogala.freehostia.com
> > > The thing is, I am the dba. > I trust myself but that's not enough ;)
In the context of this thread anyone that "trusts" a DBA is a fool. And that includes the DBA that trusts him or her self.
It isn't about trust. It is about the law.
-- Daniel A. Morgan Oracle Ace Director & Instructor University of Washington damorgan_at_x.washington.edu (replace x with u to respond) Puget Sound Oracle Users Group www.psoug.orgReceived on Thu Feb 28 2008 - 10:39:55 CST