Sorry Yeichel... I had to laugh! I've been on both sides of this situation.
I hope you showed him where his a$$ is for the next time he can't find it with his own two hands. :) and developers wonder why they have been termed duh-veloper and Dom Phoc. That's why every time someone gets upset with me and wants the schema password, I say something to the effect of "It's my job to recover it if something goes wrong. I don't have 24 hours to complete the recovery, and neither do you. No Freaking Way, Mr. CIO." (this has actually happened, it turned into quite an unpleasant discussion). Fire me if you want to. It's a lovely spring morning in Florida and there is a mockingbird serenading me.. Wow. Lisa Koivu Oracle Database Monkey Mama Fairfield Resorts, Inc. 5259 Coconut Creek Parkway Ft. Lauderdale, FL, USA 33063 > -----Original Message----- > From: Yechiel Adar [SMTP:[EMAIL PROTECTED]] > Sent: Sunday, May 05, 2002 7:48 AM > To: Multiple recipients of list ORACLE-L > Subject: Re: ERD generation tool - Active SCM > > Well , just to keep things jumping. > > Last week I deviated from our rule and gave a responsible user > that needed truncate on tables the password for the owner of the schema. > > Guess what? Today he comes to me to recreate 2 tables that he dropped. > > Go figure. > > Yechiel Adar > Mehish > > ----- Original Message ----- > To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> > Sent: Friday, May 03, 2002 5:53 PM > > > > Yechiel, > > Yes, I have been there, done that, over and over... > > But then, there is a "Toyota Corolla" solution and > > maybe a "Ferrari Testarosa" solution. > > > > If we can control "Dom Phoc" without tieing his hands > > behind the back, wouldn't that would be the best: > > white paper: > > http://www.iraje.com/docs/ActiveSecureDesigner.htm > > > > > > Keith > > > > > > Date: Thu, 02 May 2002 11:48:38 -0800 > > To: "Multiple recipients of list ORACLE-L" > > <[EMAIL PROTECTED]> > > Reply-to: [EMAIL PROTECTED] > > Organization: Fat City Network Services, San Diego, > > California > > > > > > > > Well Keith > > > > Our solution to the <Doom Phoc (and their siblings)> > > is: > > > > Do not grant they rights to do any DDL either in test > > nor in prod. > > > > The dab stuff does all the DDL work. > > Sure it is an added chore, but after tracking down, a > > few times, tables > > that > > were dropped > > inadvertently by users (their tool did it by itself) > > we now use the > > following policy: > > > > Every application has two user id's: > > Owner, with password known only to the DBA group. > > User with rights for select, insert, update, delete > > ONLY. > > > > It works. > > > > Yechiel Adar > > Mehish > > > > ----- Original Message ----- > > To: Multiple recipients of list ORACLE-L > > <[EMAIL PROTECTED]> > > Sent: Thursday, May 02, 2002 7:54 PM > > > > > > > Lisa, > > > There is only so much you can control via a model, > > > since it remains a process away from the DB, and > > > cannot be enforced via privileges, etc. So, we are > > > always in the hands of Dom Phoc (and their > > siblings), > > > who can do "stuff" even in the production database > > > with SQLPLus/TOAD/... Under this schenario, do you > > > sleep well at night? > > > > > > So, we said lets work with our Dom Phoc's. On > > > production databases, we will STRIP them off of the > > > Oracle database passwords. No password, no change. > > > ENFORCED! Now, I can sleep well at night. > > > > > > How? Not via models. Via a solution involving the > > > following, and it seems to be working for us well: > > > ActiveDesigner/ActiveChangeManager/ActiveCompare/A+ > > > White Paper: > > > http://www.iraje.com/docs/ActiveSecureDesigner.htm > > > > > > Take charge of the "Dom Phocs" in your org! > > > > > > Keith > > > > > > > > > > > > > > > > > > > > > To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>, > > > "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> > > > Date: Wed, 1 May 2002 16:06:00 -0500 > > > > > > > > > > > > > > > > > > Well, for one thing, if your developer, Dom Phoc, > > > starts changing crap > > > in > > > your database (as has happened to me in the past) a > > > compare to the dev > > > model > > > would be great because my development changes would > > be > > > in the model, > > > not in > > > the test or production databases. In that specific > > > case I had to TRUST > > > him > > > (what? trust him after what he just did?) to change > > > everything back, > > > or > > > restore from a backup, which would have been very > > time > > > consuming. > > > > > > I was one large ball of raging hormones that day and > > I > > > took it all out > > > on > > > him. We don't work on the same projects anymore. > > > > > > Lisa Koivu > > > Oracle Database Administrator > > > Fairfield Resorts, Inc. > > > 5259 Coconut Creek Parkway > > > Ft. Lauderdale, FL, USA 33063 > > > > > > > > > > -----Original Message----- > > > > From: Keith Peterson [SMTP:[EMAIL PROTECTED]] > > > > Sent: Wednesday, May 01, 2002 5:50 PM > > > > To: Multiple recipients of list ORACLE-L > > > > Subject: RE: ERD generation tool - Active > > > Comparisons > > > > > > > > Am I speaking to the wind .... > > > > > > > > For Compares, why would you compare the MODEL with > > > the > > > > DATABASE...like going from US to London via > > Tokyo... > > > > ... and you get to pay more, like... you pay not > > for > > > > distance, but for "time in the air"... If a tool > > > takes > > > > longer to do something, makes more mistakes, is > > > bumpy > > > > and complex... you get to pay more. > > > > > > > > For compares, someone tell me what beats > > > > ActiveCompare: > > > > http://www.iraje.com/compare-diff.htm > > > > > > > > http://www.iraje.com/ActiveCompare_viewlet.html > > > > > > > > > > > > ...and I will switch my tool. > > > > > > > > Keith > > > > > > > > > > __________________________________________________ > > Do You Yahoo!? > > Yahoo! Health - your guide to health and wellness > > http://health.yahoo.com > > -- > > Please see the official ORACLE-L FAQ: http://www.orafaq.com > > -- > > Author: Keith Peterson > > INET: [EMAIL PROTECTED] > > > > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 > > San Diego, California -- Public Internet access / Mailing Lists > > -------------------------------------------------------------------- > > To REMOVE yourself from this mailing list, send an E-Mail message > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > > the message BODY, include a line containing: UNSUB ORACLE-L > > (or the name of mailing list you want to be removed from). You may > > also send the HELP command for other information (like subscribing). > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Yechiel Adar > INET: [EMAIL PROTECTED] > > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California -- Public Internet access / Mailing Lists > -------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Koivu, Lisa INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
