Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Why are people so afraid of underscore parameters ?

Re: Why are people so afraid of underscore parameters ?

From: Pete Sharman <peter.sharman_at_oracle.com>
Date: 26 Aug 2002 09:32:37 -0700
Message-ID: <akdl7501qba@drn.newsguy.com>


In article <3D6A4739.5EE895C1_at_exesolutions.com>, Daniel says...
>

snip all Tom's useful email!
>
>I absolutely agree. But with respect to your example with CONNECT. Why would
>anyone
>not drop the CONNECT role about one SQL statement after changing the default
>passwords
>for SYS and SYSTEM? Privileges should be based on need and should be specific to
>that
>need. Not just granted because Oracle Corp. happens to make them available.
>
>Daniel Morgan
>

Unfortunately, there's one very simple reason for this. Because we haven't got rid of the role. I've been pushing for getting rid of the CONNECT, RESOURCE and DBA roles for eons (shows you how far I am up the totem pole, hey?!), but unfortunately there are far too may pieces of software out there (our own Apps product used to be one of them, not sure if it still is) that need the CONNECT role at least to be installed correctly. What needs to happen is for someone to actually come out and say "These roles are going to be desupported in version x and obsolete in version y" so that the companies that make software that uses them have time to move to the right way of doing things. Who knows when we'll see that, though. Not me!

HTH. Additions and corrections welcome.

Pete

SELECT standard_disclaimer, witty_remark FROM company_requirements; Received on Mon Aug 26 2002 - 11:32:37 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US