> -----Original Message-----
> Nuno Pinto do Souto
>
> Fact is: an admin user MUST have access to an admin 
> privileged account.
> Call it whatever you want, root or role, who cares.

In my case I also enforce the "don't sign on as SYS/SYSTEM" rule. The reasons I do 
that:
- The default tablespace for SYS is SYSTEM, and I don't like to change that. There are 
probably reasons why you wouldn't want to change that. But when I sign on to do my DBA 
work to try something I don't want to have to specify a tablespace name every time I 
create a test object like CREATE TABLE TEST (X NUMBER) STORAGE (INITIAL 1000M)
- If each DBA has a named account, it's easy to tell who's logged in to the database 
by saying
SELECT USERNAME FROM V$SESSION ;
otherwise I would have to figure out who could be logged on as SYSTEM to call them and 
ask them if it's OK to shutdown the database.

Telling all the DBAs "sign on as SYSTEM" would be (IMHO) like telling all the 
programmers "You can all sign on as user 'coder'" and all users "you can all sign on 
in the database as user 'data_entry_person'".
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jacques Kilchoer
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to