Re: Is Statspack a Security Problem?

2002-07-25 Thread Yechiel Adar
Thanks Ian. Have a beer on me, you earned it with this info. Yechiel Adar Mehish - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Wednesday, July 24, 2002 11:51 PM Ian, You are likely to win the wager on this one. I discovered the public when i

RE: Is Statspack a Security Problem?

2002-07-24 Thread kkennedy
Sounds like yet another good reason for using bind variables 8-) Kevin Kennedy First Point Energy Corporation -Original Message- Sent: Wednesday, July 24, 2002 8:23 AM To: Multiple recipients of list ORACLE-L To wit: $grep -i grant spctab.sql grant select on STATS$SNAPSHOT_ID

RE: Is Statspack a Security Problem?

2002-07-24 Thread Rodd Holman
Why not just backup the spctab.sql script and then in vi do a g:/PUBLIC/s//DBA or whatever role you choose to play with statspack before running. Although bind vars are still appropriate too. Rodd Holman On Wed, 2002-07-24 at 12:23, kkennedy wrote: Sounds like yet another good

RE: Is Statspack a Security Problem?

2002-07-24 Thread MacGregor, Ian A.
: Wednesday, July 24, 2002 11:56 AMTo: Multiple recipients of list ORACLE-LSubject: RE: Is Statspack a Security Problem?Why not just backup the spctab.sql script and then in vi do a g:/PUBLIC/s//DBA or whatever role you choose to play with statspack before running. Although bind vars

RE: Is Statspack a Security Problem?

2002-07-24 Thread Ron Rogers
Ian, You are likely to win the wager on this one. I discovered the public when i was trying to secure my database. There are grants to public all over the place. I would be very interested to know and understand why Oracle did grant so much to public and what can be safely revoked. Ron ROR mô¿ôm