Adriano dos Santos Fernandes wrote:

> Leyne, Sean wrote:
>
>>> Only SYSDBA/owner is allowed to backup a db.
>>>
>>>
>> True, but remember that there was been discussion of defining a
>> "security context" (for lack of a better word) which would allow for
>> rights to be granted to any user to perform backups.
>>
>>
> So just verify (when the new DPB is passed) if user is SYSDBA/owner when
> the attachment don't come from these utilities.
> And anyone will backup without run the triggers.
>
>
>

That's not a very good solution. The existing security model is based
on accounts and privileges. Building in a short cut based on
application type breaks the model. There is nothing about a logical
backup that requires breaking the security model. And if there were, a
full replacement security model should be proposed and discussed.

--

Jim Starkey, Senior Software Architect
MySQL AB, www.mysql.com
978 526-1376