Direct Privilege Management of Oracle Database

Schema privilege and object privilege using sql grant and Oracle role using business logic.
 
Nov. 4, 2011 - PRLog -- Here, I refer to the various system and object privileges that may be granted and revoked from individual database user IDs. As mentioned earlier, always follow the “least privilege” path, where the barest minimum privileges are granted to each database user ID. In a bid to ease your overall administration overhead and maintenance time, you may be tempted to grant unwanted privileges to even new users. However, these users may not understand the importance of security and inadvertently reveal their passwords to other users, who could potentially use them for malicious purposes, typical example: the disgruntled employee just about to tender his resignation.

To facilitate the management of privileges, Oracle allows the use of roles that reinforce and give them the privileges of a function of needs. To facilitate the administration of functions in an enterprise environment consisting of multiple applications and Oracle8 database server security allows global functions to be determined which can be centrally defined and interpreted locally within each base of data. For example, you can set a global function named Manager consists of several functions in each database. Therefore, the role of global leadership CHANGE_PAY could have been in the basic wage, when you could have given the paper CHECK_INVENTORY inventory database.

Thus, the new leader to join a company that is readily available on paper, and after the merger to pay for the database, the change in wages, but if you connect to the basic data on populations you can check the current inventory. Ideally, the privilege of leadership positions is fine. In the previous version of Oracle stored procedures, but performance rights through roles are translated into execution, in which the roles and rights in a real environment. In any case, the use of the database necessary to (understand, if they have additional rights beyond what you think is necessary to identify monitored at regular intervals in the database along with them their real needs), users and grant / cancel the powers and functions, respectively. Oracle offers a decent review mechanism to monitor the commands that are executed by users at different times.

For more detail of database support and database services
http://www.dbametrix.com/remote-dba.html
http://www.dbametrix.com

# # #

Expert remote Oracle DBA team offers remote dba support,remote dba services,remote dba work,remote database monitoring,database services,outsourcing with very low cost plan using SLA.
End
Dbametrix Solutions PRs
Trending News
Most Viewed
Top Daily News



Like PRLog?
9K2K1K
Click to Share