RE: Using TOAD on production databases

  • From: "Potluri, Venu (IDS AIS SE)" <venu_potluri@xxxxxx>
  • To: <oracle-l@xxxxxxxxxxxxx>
  • Date: Mon, 16 Aug 2004 18:10:51 -0400

How can they make the data change if they don't have the privileges. For
example, if they don't have update, insert, delete on a table, how can
TOAD make it easier for them to change data in production?


-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Scott Canaan
Sent: Monday, August 16, 2004 4:42 PM
To: oracle-l@xxxxxxxxxxxxx
Subject: RE: Using TOAD on production databases

Venu,
   Just keep in mind that if the developers have the rights to change
any of the data in production, they will be able to do it directly via
TOAD.  TOAD makes it even easier to make data changes, without SQL.

Scott Canaan (srcdco@xxxxxxx)
(585) 475-7886
"Life is like a sewer, what you get out of it depends on what you put
into it." - Tom Lehrer.


-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Potluri, Venu (IDS
AIS SE)
Sent: Monday, August 16, 2004 4:24 PM
To: oracle-l@xxxxxxxxxxxxx
Subject: Using TOAD on production databases

Is there any problem with developers using Quest Software's TOAD on
production databases? Regardless of the functionality in TOAD, a
developer shouldn't be able to use the DBA functionality in TOAD,
correct? We grant roles to developers and those roles never include any
privilesges on SYSTEM or SYS owned objects. What made me ask this
question is a script on www.orafaq.com that shows a way to prevent
developers from using TOAD on production databases. Any thoughts are
appreciated.

Venu Potluri
Oracle Financials DBA=3D20
--------------------------------------------------------
=3D20
If you are not an intended recipient of this e-mail, please notify the
sender, delete it and do not read, act upon, print, disclose, copy,
retain or redistribute it. Click here for important additional terms
relating to this e-mail.     http://www.ml.com/email_terms/=3D20
--------------------------------------------------------
=3D20

----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------=20
--------------------------------------------------------
=20
If you are not an intended recipient of this e-mail, please notify the =
sender, delete it and do not read, act upon, print, disclose, copy, =
retain or redistribute it. Click here for important additional terms =
relating to this e-mail.     http://www.ml.com/email_terms/=20
--------------------------------------------------------
=20
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts: