RE: Database User LIB

Granting unlimited tablespace is redundant.

You can always lock the account for a time period before you pull the trigger 
on dropping it, or audit logons.

I don't recognize the account by the name LIB, but the script sure looks like 
something a vendor would produce.  The only surprise is that it didn't grant 
DBA to LIB.  

Is it Oracle 9 or 10?   Not that it matters, but 10 pulled some privileges from 
CONNECT.  Otherwise, LIB can pretty much create all his tables/objects/code 
anyplace it wants and see the data dictionary as well as any other table owned 
by anyone else.

Pretty powerful account 


Joel Patterson
Database Administrator
904 727-2546

-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ingrid Voigt
Sent: Thursday, October 15, 2009 10:52 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: Database User LIB

Hi, 

we've found a user named LIB in one of our production 
systems (9.2.0.7 EE on Windows) and have no idea where 
he came from (created after the database and the application 
schemas) or what he is used for. The customer and 
application developer do not know this user either. 

Nobody connected as LIB in the last few weeks, but 
there are things that run only rarely. 

The schema holds no objects, the create script is 
CREATE USER LIB
  IDENTIFIED BY PASSWORD MEDIA
  DEFAULT TABLESPACE USERS
  TEMPORARY TABLESPACE TEMP2
  PROFILE DEFAULT
  ACCOUNT UNLOCK;
  -- 3 Roles for LIB 
  GRANT CONNECT TO LIB;
  GRANT RESOURCE TO LIB;
  GRANT SELECT_CATALOG_ROLE TO LIB;
  ALTER USER LIB DEFAULT ROLE ALL;
  -- 2 System Privileges for LIB 
  GRANT SELECT ANY TABLE TO LIB;
  GRANT UNLIMITED TABLESPACE TO LIB;

Does anybody know if this is an Oracle default schema 
for some special purpose? Any other idea how to identify 
its purpose other than waiting for a year or so? 

We would like to drop this user if it can be done without 
any damage. 


Thank you 
Ingrid 
-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l


Other related posts: