Xref: alice comp.databases.oracle.server:68425
Path: alice!news-feed.fnsi.net!newsfeed.direct.ca!gw12.nn.bcandid.com!gate.bCandid.com!typ11.nn.bcandid.com.POSTED!not-for-mail
From: "Van Messner" <vmessner@netaxis.com>
Newsgroups: comp.databases.oracle.server
Subject: Security Question
Lines: 10
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Message-ID: <%7bK3.14540$t%3.1130342@typ11.nn.bcandid.com>
X-Trace: typ11.nn.bcandid.com 939081339 204.117.143.17 (Mon, 04 Oct 1999 19:55:39 EDT)
NNTP-Posting-Date: Mon, 04 Oct 1999 19:55:39 EDT
Date: Mon, 4 Oct 1999 19:55:26 -0400

On a job site with five servers on a network running five databases, I found
a previous DBA had given "DBA" to the connect role on one database.  That
means a lot of users have DBA rights.  If I make the (heroic) assumption
that the users on the one database don't know the user ids and passwords on
any of the others, do I still have a problem?  Is there any way the users
with DBA rights could get in and mess around with the other databases?

Van