Message-ID: <F001.004E58F8.20021010055821@fatcity.com>
Date: Thu, 10 Oct 2002 05:58:21 -0800
To: Multiple recipients of list ORACLE-L <ORACLE-L@fatcity.com>
Sender: root@fatcity.com
Reply-To: ORACLE-L@fatcity.com
Errors-To: ML-ERRORS@fatcity.com
From: John.Hallas@vodafone.co.uk
Subject: RE: Shutdown/Startup user
Organization: Fat City Network Services, San Diego, California
Precedence: bulk
Mime-Version: 1.0
Content-Type: text/plain;	charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

Sean,
The role sysoper is already provided
Details are 
There are two main administrative privileges in Oracle: SYSOPER and SYSDBA
These are special privileges as they allow access to a database instance
even when it is not running and so control of these privileges is totally
outside of the database itself.   SYSOPER privilege allows operations such
as: 	
Instance startup, mount & database open ; 	
Instance shutdown, dismount & database close ;         
Alter database BACKUP, ARCHIVE LOG, and RECOVER.   	
This privilege allows the user to perform basic operational tasks  without
the ability to look at user data.    

John

-----Original Message-----
Sent: 10 October 2002 13:29
To: Multiple recipients of list ORACLE-L


Does anyone know if it is possible to create a user who only has rights to
Shutdown a database?.  I'm thinking about scenario that if the password for
this user were ever compromised, e.g. seen in a script then worst case
scenario would be database might be shutdown.  Indulge me on this please as
I acknowledge that a shutdown could be source of major revenue loss.  This
is been driven by requirement to have a script to cleanly shutdown a
database potentially outside hours when DBA is not on site.  If anyone has
any other practical suggestions for management of this requirement I'd
appreciate hearing them too.

Oracle 7.3.3, 8.0.5, 8.1.7 
NT4, W2K 
-------------------------
Seán O' Neill
Organon (Ireland) Ltd.
[subscribed: digest mode] 
--------------------------------------------------------------------
This message, including attached files, may contain confidential
information and is intended only for the use by the individual
and/or the entity to which it is addressed. Any unauthorized use,
dissemination of, or copying of the information contained herein is
not allowed and may lead to irreparable harm and damage for which
you may be held liable. If you receive this message in error or if
it is intended for someone else please notify the sender by
returning this e-mail immediately and delete the message.
--------------------------------------------------------------------
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: O'Neill, Sean
  INET: Sean.ONeill@organon.ie

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: John.Hallas@vodafone.co.uk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).