RE: How much memory takes roles, MAX_ENABLED_ROLES
- From: "Justin Cave (DDBC)" <jcave@xxxxxxxxxxx>
- To: <oracle-l@xxxxxxxxxxxxx>
- Date: Mon, 8 Mar 2004 15:42:30 -0700
Juan,
I am certain that there is some amount of memory required to maintain extra
roles, but it is so minimal that you are never likely to care. If your
database is so well tuned that a couple of kb worth of memory to store some
extra roles is a factor, you would be better off than any other DBA on earth.
I suspect that there are manageability and performance reasons for limiting the
number of roles. If you had thousands of roles assigned to a single user, it
would be almost impossible to keep track of what that user is really allowed to
do. If a user had thousands of roles assigned, Oracle has to do a lot more
work to parse a SQL statement (or when a PL/SQL block with current_user
authentication is run) because it's a lot more difficult to figure out whether
the user has all the necessary privileges.
Justin Cave
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC
-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On
Behalf Of Juan Cachito Reyes Pacheco
Sent: Monday, March 08, 2004 2:08 PM
To: oracle-l@xxxxxxxxxxxxx
Subject: Re: How much memory takes roles, MAX_ENABLED_ROLES
Thanks Stephane Faroult,
I don't udnerstand how Oracle admin roles
I have the impression there is a formula like
#roles*user*xbytes;
To determine the role memory usage.
Or it is only a way to control
the number of roles your database has.
To avoid as you say, have too much and lose the track of them.
----- Original Message -----
From: "Stephane Faroult" <sfaroult@xxxxxxxxxx>
To: <oracle-l@xxxxxxxxxxxxx>
Sent: Monday, March 08, 2004 3:41 PM
Subject: Re: How much memory takes roles, is important to limit their
number?
> Juan Cachito Reyes Pacheco wrote:
> >
> > Hi, somebody know why there is parameter MAX_ENABLED_ROLES
> > The first impression I got, is because they take too much memory, so is
> > better limit them.
> > Is there a way to measure the amount of memory they take.
> > ( or "optimize" them??? if this really means something)
> > Thank you :)
> >
>
> As far as memory consumption goes, roles wouldn't be my first worry. I
> agree with you that a huge number of roles is not a good thing, but not
> for the same reason. More basically, you very quickly begin to lose
> track of whom is allowed to do what when you have too many roles.
> One caveat though (got caught once, a long time ago - don't know if it's
> still true, probably), if you have one single admin account which is
> used for everything including creating roles, don't forget that a role
> is given (and by default enabled) to its creator, so your admin account
> may quickly bump into the limit.
>
> --
> Regards,
>
> Stephane Faroult
> Oriole Limited
> ----------------------------------------------------------------
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> ----------------------------------------------------------------
> To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
> put 'unsubscribe' in the subject line.
> --
> Archives are at //www.freelists.org/archives/oracle-l/
> FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
> -----------------------------------------------------------------
>
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Other related posts:
