Home » RDBMS Server » Server Administration » Managing DB users (Oracle DB Enterprise Edition 11.2.0.3, OEL 5.7)
Managing DB users [message #615174] Fri, 30 May 2014 17:14 Go to next message
jesuisantony
Messages: 155
Registered: July 2006
Location: Chennai
Senior Member
We have setup a new environment in production. It has been few months and now start get requests for disabling DB accounts, as the users move out of the project. I understand there is no option to really disable the user. So we revoke all the privilege of the user and lock the account. One challenge I face is distinguishing the active and disabled users.

In a typical production environment, does it make sense to have the account locked? How should things work for a typical production environment?

Regards,
Antony
Re: Managing DB users [message #615177 is a reply to message #615174] Fri, 30 May 2014 17:42 Go to previous messageGo to next message
BlackSwan
Messages: 25793
Registered: January 2009
Location: SoCal
Senior Member
> How should things work for a typical production environment?
on NONE of the production DB Servers I manage, does anyone other than me (DBA) have any active schema.
only "application" schema are active on any Production server.
Re: Managing DB users [message #615178 is a reply to message #615174] Fri, 30 May 2014 18:21 Go to previous messageGo to next message
jesuisantony
Messages: 155
Registered: July 2006
Location: Chennai
Senior Member
Our client works on a research and development project. Hence the business data is directly accessed by the clients have read-only access. So there are people having DB account with read-only access.
Re: Managing DB users [message #615179 is a reply to message #615178] Fri, 30 May 2014 18:41 Go to previous messageGo to next message
BlackSwan
Messages: 25793
Registered: January 2009
Location: SoCal
Senior Member
jesuisantony wrote on Fri, 30 May 2014 16:21
Our client works on a research and development project. Hence the business data is directly accessed by the clients have read-only access. So there are people having DB account with read-only access.


remove CREATE SESSION then they can no long log into the database.
Re: Managing DB users [message #615183 is a reply to message #615174] Sat, 31 May 2014 00:30 Go to previous messageGo to next message
Michel Cadot
Messages: 65317
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

Locking an account is the way to disable it.
If it is not the case for you, define what you mean by "disable".

Re: Managing DB users [message #615218 is a reply to message #615183] Sun, 01 June 2014 02:01 Go to previous message
ledo60
Messages: 63
Registered: May 2014
Member
You can lock or drop unused accounts , but keep in mind that if you decided to drop them you have to be sure that these accounts not having a special schema and data+ no need to keep their actions history
Previous Topic: ERROR at line 62: ORA-01652: unable to extend temp segment by 16 in tablespace
Next Topic: LAST SQL RAN BEFORE KILLING A SESSION
Goto Forum:
  


Current Time: Wed Jan 17 15:08:44 CST 2018

Total time taken to generate the page: 0.03383 seconds