-----Original Message----- Sent: Thursday, November 13, 2003 10:49 PM To: Multiple recipients of list ORACLE-L
<SNIP> >Stopping someone from using a given set of accounts achieves preciously >nothing in terms of security (or auditing) IF the functionality of those >accounts >is then replicated to other accounts. <SNIP> Not if someone (I.e. an 'operator') is only using a portion of the access (COMPLETE) that is given to sys and/or system. >Fact is a DBA needs to be able to exp/imp (debatable, but let's ignore >that). >And manage rights. And manage space. And manage allocations, >And monitor the system. And a myriad of other tasks immaterial to the >point I'm trying to make. But a user account for Joe DBA and another user account for Jane DBA, etc, etc will provide accountability and tracability, vs a 'public' account does not. Just my $0.02 -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Cupp Michael E Contr Det 1 AFRL/WSI INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
