Re: need final word on sysdba


"Mark D Powell" <Mark.Powell@xxxxxxx> wrote in message
news:1138907968.824552.60900@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Randy, you need to setup a password file to be able to connect as
sysdba remotely. Otherwise only local sysdba connects are allowed.

I suggest that you do not give the vendor the sys or system ID's.
Rather grant DBA to an ID created for the vendor. The vendor should
not need access to the actual Oracle account and likely just needs a
slew of database object DDL privileges, that is, system privileges like
CREATE TABLE, CREATE VIEW, Unlimited Quota, etc.... Some vendors even
know what privilege their application needs are you can just grant
these rather than sysdba or even DBA.

HTH -- Mark D Powell --


Thanks Mark. Your suggestions make a lot of sense to me. I just had
another vendor finally relent and supply a list of required privileges,
rather than insist on DBA, for their latest product update.

--
Randy Harris
tech at promail dot com
I'm pretty sure I know everything that I can remember.

.

Relevant Pages

  • Re: need final word on sysdba
    ... Otherwise only local sysdba connects are allowed. ... I suggest that you do not give the vendor the sys or system ID's. ... Rather grant DBA to an ID created for the vendor. ... slew of database object DDL privileges, that is, system privileges like ...
    (comp.databases.oracle.misc)
  • Re: Access can show external tables in ODBC, so why cant vb.net apps do it?
    ... the only DBA for the Informix system is the ... vendor for the software we're using and the vendor does not want to help us ... tables/structures with ODBC in this one database, ...
    (microsoft.public.access.externaldata)
  • RE: login session transcript
    ... Your best bet would probably be to use SUDO instead of giving the vendor ... privileges he would effectively need. ... mechanisms which cannot be compromised by using the privileged root account. ... Cipher - Segurança da Informação ...
    (Security-Basics)
  • need final word on sysdba
    ... I have a vendor that needed a db created for his product. ... I thought that 9i was supposed to limit sysdba access to only the host ... He insists that he is able to install on other systems, ...
    (comp.databases.oracle.misc)
  • Re: SYSTARTUP_VMS (was: Three questions re: the VMS startup process)
    ... > We must keep the environment in the state that the vendor will support. ... The images are installed with privileges ... As with any startup, measures should be put in place that allow for sanity ... disables in SYLOGIN.COM. ...
    (comp.os.vms)
Loading