| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Usenet -> c.d.o.server -> Re: sqlplus small doubt
Chuck
The roles CONNECT, RESOURCE and DBA are there for backward compatibility only. They're not obsolete (yet) in that you can still use them, but there is no guarantee that they will be there in future releases. The idea is you should use the much finer granularity of security available post-v6, and maybe make your own roles (like DEVELOPER, ENDUSER, ADMINISTRATOR) with only the relevant privileges granted to them.
Having said that, I've still seen Oracle itself use the CONNECT, RESOURCE and DBA roles, so they'll probably be around for some time to come!
HTH Pete
Chuck Hamilton wrote:
> So why are CONNECT, RESOURCE, and DBA roles all obsolete on Oracle 7?
> Without CONNECT, a user can't connect to the database.
>
> The only time I don't grant CONNECT to a user is if that's the user
> the owns the applications tables. I only occasionally give that user
> connect privileges if I need to do maintenance. Like grant access to
> his tables to a new role or user. Then I revoke it as soon as I'm
> done.
>
> Chuck
>
> On Fri, 29 Jan 1999 15:32:37 -0000, "Jonathan Lewis"
> <jonathan_at_jlcomp.demon.co.uk> wrote:
>
> >
> >
> >Hint: It is a common error in almost all Oracle 7 and 8 installation to
> >make use of the obsolete CONNECT, RESOURCE and DBA roles
> >when creating Oracle accounts. You should review the requirements
> >of your site and create roles which are relevant.
> >
> >
> >Jonathan Lewis
> >Yet another Oracle-related web site: www.jlcomp.demon.co.uk
> >
> >
> >
> >
> >
> >
> >kvsraju_at_usa.net wrote in message <78ro5s$sed$1_at_nnrp1.dejanews.com>...
> >>I have my Oracle 8.0.3.0 database running on windows nt platform.
> >>All my users,they will be connected to database using an account,say TEST1
> >>Now i want to make sure that all the users cann't drop tables.
> >>How is it possible?
> >>there is no command called DROP TABLE to disable the user.
> >>so i want to control through sql*plus
> >>How is it possible.
> >>I came to know that we have change user product profile file.But i am not
> >sure
> >>about it
> >>
> >>-----------== Posted via Deja News, The Discussion Network ==----------
> >>http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
> >
>
> --
> Chuck Hamilton
> chuckh_at_safeaccess.net
>
> Never share a foxhole with anyone braver than yourself!
--
Regards
Pete
Peter Sharman Email: psharman_at_us.oracle.com WISE Course Development Manager Phone: +1.650.607.0109 (int'l) Worldwide Internal Services Education (650)607 0109 (local)San Francisco
"Controlling application developers is like herding cats."
Kevin Loney, ORACLE DBA Handbook
"Oh no it's not! It's much harder than that!"
Bruce Pihlamae, long term ORACLE DBA
 |
 |