Re: "Write once-Read many" table ?

jm.scheiwiler@xxxxxxxxx wrote:
On Feb 27, 6:17 pm, Mladen Gogala <mgog...@xxxxxxxxx> wrote:
On Wed, 27 Feb 2008 07:16:05 -0800, jm.scheiwiler wrote:
Hello,
For legal reasons, we would like to create tables where one can insert,
select but never never delete nor update.
I know we can prevent delete and update with revoke grants or with
triggers but this is not satisfactory because grants can be re-granted
and triggers can be dropped.
You have to trust your DBA. That's the bottom line.

--http://mgogala.freehostia.com


The thing is, I am the dba.
I trust myself but that's not enough ;)

In the context of this thread anyone that "trusts" a DBA is a fool.
And that includes the DBA that trusts him or her self.

It isn't about trust. It is about the law.
--
Daniel A. Morgan
Oracle Ace Director & Instructor
University of Washington
damorgan@xxxxxxxxxxxxxxxx (replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org
.

Relevant Pages

  • =?iso-8859-1?Q?RE=3A_security_against_dba=B4s?=
    ... Meaning, yes, you should trust the people you hire into ... positions of control such as DBA's, SA's, NA's, etc. but you shouldn't ... not just DBA ... If you are not the intended recipient, be aware that any disclosure, ...
    (Security-Basics)
  • =?iso-8859-1?Q?RE:_security_against_dba=B4s?=
    ... I am curious about the repeated argument "if you don't trust your DBA's, hire/promote someone you can trust". ... 1- inform all employees, not just DBA ... in other words network endpoint control ...
    (Security-Basics)
  • =?iso-8859-1?Q?RE=3A_security_against_dba=B4s?=
    ... I am curious about the repeated argument "if you don't trust your DBA's, hire/promote someone you can trust". ... 1- inform all employees, not just DBA ... in other words network endpoint control ...
    (Security-Basics)
  • Re: "Write once-Read many" table ?
    ... triggers but this is not satisfactory because grants can be re-granted ... and triggers can be dropped. ... You have to trust your DBA. ...
    (comp.databases.oracle.server)
  • Re: security against dba´s
    ... 1- inform all employees, not just DBA ... Look, if you don't trust your DBA's, hire/promote someone you can trust. ... Track files/data downloaded to USB devices, in other words network endpoint control. ...
    (Security-Basics)