On Monday 21 June 2004 14:01, Jonathan Neve wrote:

Hi,

> >Even if you don't use the built in security and do it all in your app, it
> > is still not a good idea for for all users to connect under SYSDBA.
>
> Why not?

Because SYSDBA has rights to the 'system' and other databases that a user of
an 'app' should not have, IMO.

> >Create a
> >new user and get them all to connect under that instead.
>
> This sounds to me like a lot of fuss and bother for nothing. That means
> that I'll constantly have to be maintaining the grants for an
> all-powerful user, so as to make sure that it always says all-powerful.

Not if the new user is the DB owner.

> If I want it be all-powerful, why not use SYSDBA, which is already
> all-powerful?

Its too powerful (again IMO).

Phil

--
Discover a lost art - play Marbles
May 2004
www.marillion.com
ICQ: 760757 | AIM: pjshrimpton | Y!: pjshrimpton | pjshrimpton@...