RE: Re[2]: What Sort of Privilege?
- From: "Nelson, Allan" <anelson@xxxxxxxxxxx>
- To: oracle-l@xxxxxxxxxxxxx
- Date: Wed, 25 Aug 2004 11:59:55 -0500
Some motivation for a single schema is that the number of synonyms
needed by apps and apps_mrc are causing performance problems. How
really knows what Oracle may chose to include in any release. I'm doing
an upgrade from 11.5.7 to 11.5.9 and the new one is really, really
different. Sigh.
Allan
-----Original Message-----
=46rom: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Mark W. Farnham
Sent: Wednesday, August 25, 2004 7:23 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: RE: Re[2]: What Sort of Privilege=3F
One log on for use has been in place for some time. So "apps" gets all
the synonyms, views, packages, and all important cross schema grants,
but there are still many schema owners so the purpose of various tables
and the architecture of individual product groups has some chance of
being an understandable total.
The big advance was from logging on, as, say PO, to use purchasing, and
therefore needing grants to PO for various other schema' objects. As the
number of schema owners grew, figuring out the required grants was a
nightmare and the number of dictionary entries to support the grants for
each applications schema grew on the order of some exponential or
=66actorial based on the number of schema owners and the number of tables
and packages in each schema needing access from other schemas. When it
got bad enough, creating a single log on user at least got the number of
dictionary entries down to linear growth based on the total number of
tables.
(My apologies if you get cold sweats in remembrance of these exponential
number of grants nightmares, which you've likely suppressed as well as
you're able.)
Now, as for whether there is a move afoot to actually migrate to a
single schema, I'm guessing that would cause major heartburn in lieu of
an alter table clause that changed the schema of a table on the order of
expense of updating the dictionary and invalidating dependent security
references as needed. I don't think that exists. Too many pages in the
manual to be sure, but I scanned alter table and checked for the
non-existance (to my ability to search) of alter owner. I'm not sure
what else it might get named.
Then again I may have missed a message on a direction.
mwf
-----Original Message-----
=46rom: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx]On Behalf Of Cary Millsap
Sent: Tuesday, August 24, 2004 10:35 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: RE: Re[2]: What Sort of Privilege=3F
Aren't the new Oracle E-Business applications moving to a
single-schema-for-everything model=3F
Cary Millsap
Hotsos Enterprises, Ltd.
http://www.hotsos.com
* Nullius in verba *
Upcoming events:
- Performance Diagnosis 101: 9/14 San Francisco, 10/5 Charlotte, 10/26
Toronto
- SQL Optimization 101: 8/16 Minneapolis, 9/20 Hartford, 10/18 New
Orleans
- Hotsos Symposium 2005: March 6-10 Dallas
- Visit www.hotsos.com for schedule details...
-----Original Message-----
=46rom: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx]
On Behalf Of Goulet, Dick
Sent: Tuesday, August 24, 2004 8:50 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: RE: Re[2]: What Sort of Privilege=3F
On this issue it would appear so!! ;-)
Dick Goulet
Senior Oracle DBA
Oracle Certified 8i DBA
-----Original Message-----
=46rom: Mercadante, Thomas F [mailto:thomas.mercadante@xxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 24, 2004 9:16 AM
To: 'oracle-l@xxxxxxxxxxxxx'
Subject: RE: Re[2]: What Sort of Privilege=3F
Dick,
Am I 100% wrong=3F :)
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
=46rom: Goulet, Dick [mailto:DGoulet@xxxxxxxx]=3D20
Sent: Tuesday, August 24, 2004 9:12 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: RE: Re[2]: What Sort of Privilege=3F
Tom,
Sorry, but you are wrong. I prefer the many schema method as
well.
Dick Goulet
Senior Oracle DBA
Oracle Certified 8i DBA
-----Original Message-----
=46rom: Mercadante, Thomas F [mailto:thomas.mercadante@xxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 24, 2004 8:21 AM
To: 'oracle-l@xxxxxxxxxxxxx'
Subject: RE: Re[2]: What Sort of Privilege=3F
Jo,
Well, The Oracle Apps applications have many schema's - much like what
=3D =3D3D you described. I'm guessing that the majority of home-grown
applications have only one schema for all of the tables. I could be
wrong. In my =3D view, it is =3D3D easier to manage. Everything is in one
place. It prevents =3D you from creating =3D3D two database objects with
the same name. Managing security =3D is easier - =3D3D again, you can issue
all your grants from one schema, =3D rather than needing to =3D3D keep
re-logging in.
Maybe it's just me!
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
=46rom: jo_holvoet@xxxxxxxx [mailto:jo_holvoet@xxxxxxxx]=3D3D20
Sent: Tuesday, August 24, 2004 8:13 AM
To: oracle-l@xxxxxxxxxxxxx
Cc: 'oracle-l@xxxxxxxxxxxxx'; oracle-l-bounce@xxxxxxxxxxxxx
Subject: RE: Re[2]: What Sort of Privilege=3F
Hi Tom,
we (well, it was in place before I got here, but anyway) basically =3D
have=3D3D20 one schema per application. We also have one schema which
houses =3D3D "common"=3D3D20 data, i.e. data used in many different
places/apps; e.g. employees,=3D3D20 customers, products, plants, .... So
we have many =3D cross-schema FKs to =3D3D the=3D3D20 "common" data but
outside that everything is pretty =3D well partitioned.=3D3D20 Maybe that's
why I've never really had any problems =3D with it.
Is having what is basically a one-schema database common practice =3F
mvg/regards
Jo
"Mercadante, Thomas F" <thomas.mercadante@xxxxxxxxxxxxxxxxx>
Sent by: oracle-l-bounce@xxxxxxxxxxxxx
08/24/2004 14:03
Please respond to oracle-l
=3D3D20
To: "'oracle-l@xxxxxxxxxxxxx'" <oracle-l@xxxxxxxxxxxxx>
cc:=3D3D20
Subject: RE: Re[2]: What Sort of Privilege=3F
Jo,
I guess I should clarify.
If you made a consious decision to maintain multiple schema's within =3D3D
=3D your database, then it is your choice.
I prefer one schema holding all of the database tables that make up the
corporate-wide application.
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
=46rom: jo_holvoet@xxxxxxxx [mailto:jo_holvoet@xxxxxxxx]=3D3D20
Sent: Tuesday, August 24, 2004 7:58 AM
To: oracle-l@xxxxxxxxxxxxx
Cc: 'oracle-l@xxxxxxxxxxxxx'; oracle-l-bounce@xxxxxxxxxxxxx
Subject: RE: Re[2]: What Sort of Privilege=3F
Not sure about that. We have for example an employee table that is=3D3D20
referenced just about everywhere (e.g. which salesperson is =3D
responsible=3D3D20 for this customer, which employee registered for this
training =3D course,=3D3D20 which operator filed this incident report, ...).
These are all different =3D =3D3D
apps/schemas referencing this table so I don't see how we can avoid=3D3D20
cross-schema FKs.
mvg/regards
Jo
"Mercadante, Thomas F" <thomas.mercadante@xxxxxxxxxxxxxxxxx>
Sent by: oracle-l-bounce@xxxxxxxxxxxxx
08/24/2004 13:49
Please respond to oracle-l
=3D3D20
To: "'oracle-l@xxxxxxxxxxxxx'" <oracle-l@xxxxxxxxxxxxx>
cc:=3D3D20
Subject: RE: Re[2]: What Sort of Privilege=3F
Peter,
I totally agree with you. Allowing Fk references from outside of =3D
the=3D3D20 schema is inviting confusion, duplication and disaster. There
is really =3D no =3D3D good reason for it.
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
=46rom: Peter Robson [mailto:pgro@xxxxxxxxx]=3D3D20
Sent: Tuesday, August 24, 2004 4:57 AM
To: Jackie Brock
Cc: oracle-l@xxxxxxxxxxxxx
Subject: Re[2]: What Sort of Privilege=3F
Whoa there everybody!
While the answer is quite correct, of course (I read the FM years =3D
ago),=3D3D20 what has not been raised is the danger of allowing reference
to multiply unhindered across numerous schemas.
Be very careful if you choose to do this, otherwise, without a =3D
little=3D3D20 care, you may manage to lock your entire database solid with
conflicting FKs!
We did, learned our lesson, and now reference is ONLY permitted within =3D
=3D3D the one corporate schema.
peter
edinburgh
.............
JB> references
JB> All,
JB> what kind of privilege new for creating a FK constraint=20
JB> which=3D3D20=3D20 reference table belongs to another schema.
JB> ALTER TABLE PAM.table1
JB> ADD CONSTRAINT FKCONS1
JB> FOREIGN KEY (ID)
JB> REFERENCES schema1.table2 (ID2);
JB> I have grant select,insert,update,delete for table2 BUT still I=3D20=20
JB> get=3D3D20 insufficient privilege. any idea=3F
JB> Hamid Alavi
--=3D3D20
mailto:pgro@xxxxxxxxx
*********************************************************************
This e-mail message, and any files transmitted with it, are
confidential and intended solely for the use of the addressee. If =3D
=3D3D this message was not addressed to you, you have received it in
error and any copying, distribution or other use of any part of it
is strictly prohibited. Any views or opinions presented are solely those
of the =3D3D =3D sender and do not necessarily represent those of the
British Geological =3D3D =3D Survey. The security of e-mail communication
cannot be guaranteed and the BGS accepts no liability for claims
arising as a result of the use of this medium to transmit messages from
or to the
BGS. . http://www.bgs.ac.uk
*********************************************************************
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put
'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
=46AQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
___________________________________________________________________________=
___
This email is intended solely for the person or entity to which it is =
addressed and may contain confidential and/or privileged information. =
Copying, forwarding or distributing this message by persons or entities =
other than the addressee is prohibited. If you have received this email in =
error, please contact the sender immediately and delete the material from =
any computer. This email may have been monitored for policy compliance. =
[021216]
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Other related posts:
