Oracle-L: RE: Shutdown/Startup user

From: <John.Hallas_at_vodafone.co.uk>
Date: Thu, 10 Oct 2002 05:58:21 -0800
Message-ID: <F001.004E58F8.20021010055821@fatcity.com>

Sean,
The role sysoper is already provided
Details are
There are two main administrative privileges in Oracle: SYSOPER and SYSDBA These are special privileges as they allow access to a database instance even when it is not running and so control of these privileges is totally outside of the database itself. SYSOPER privilege allows operations such as:
Instance startup, mount & database open ; Instance shutdown, dismount & database close ; Alter database BACKUP, ARCHIVE LOG, and RECOVER. This privilege allows the user to perform basic operational tasks without the ability to look at user data.

John

-----Original Message-----
Sent: 10 October 2002 13:29
To: Multiple recipients of list ORACLE-L

Does anyone know if it is possible to create a user who only has rights to Shutdown a database?. I'm thinking about scenario that if the password for this user were ever compromised, e.g. seen in a script then worst case scenario would be database might be shutdown. Indulge me on this please as I acknowledge that a shutdown could be source of major revenue loss. This is been driven by requirement to have a script to cleanly shutdown a database potentially outside hours when DBA is not on site. If anyone has any other practical suggestions for management of this requirement I'd appreciate hearing them too.

Oracle 7.3.3, 8.0.5, 8.1.7
NT4, W2K

Seán O' Neill
Organon (Ireland) Ltd.
[subscribed: digest mode]

This message, including attached files, may contain confidential information and is intended only for the use by the individual and/or the entity to which it is addressed. Any unauthorized use, dissemination of, or copying of the information contained herein is not allowed and may lead to irreparable harm and damage for which you may be held liable. If you receive this message in error or if it is intended for someone else please notify the sender by returning this e-mail immediately and delete the message.

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: O'Neill, Sean
INET: Sean.ONeill_at_organon.ie

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: John.Hallas_at_vodafone.co.uk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------