RE: Oracle Security Tool

From: Mercadante, Thomas F <thomas.mercadante_at_labor.state.ny.us>
Date: Wed, 21 Jul 2004 07:44:48 -0400
Message-ID: <DE8A21F8F1D0254EA4A9214D52AB2FEDAD5CFD@exchsen0a1ma>

Tracy,

How about this:

Have an Oracle role that has update access to all objects. Grant this role to the user when they need it. Have a cron job that runs every night that revokes this role from everyone.

Would that work?

Tom Mercadante
Oracle Certified Professional

-----Original Message-----

From: Tracy Rahmlow [mailto:tracy.rahmlow_at_aexp.com] Sent: Tuesday, July 20, 2004 6:04 PM
To: oracle-l_at_freelists.org
Subject: Oracle Security Tool

Currently, our IS support staff have full access to the production database. To minimize risk and to satisfy audit concerns, we need to address the issue. Preferably as automated as possible. Does a tool exist, whereby a support staff member could request update access on table abc for x hours and then have the request forwarded for approval and then implemented? The access would then be automatically revoked after the timeout period. Auditing would be invoked, blah, blah, blah.... Any thoughts??

American Express made the following
annotations on 07/20/2004 03:03:52 PM

"This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you."

Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.
--

Archives are at http://www.freelists.org/archives/oracle-l/

FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html


-----------------------------------------------------------------

----------------------------------------------------------------

Please see the official ORACLE-L FAQ: http://www.orafaq.com


----------------------------------------------------------------

To unsubscribe send email to:  oracle-l-request_at_freelists.org

put 'unsubscribe' in the subject line.
--

Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html

Received on Wed Jul 21 2004 - 06:45:08 CDT