RE: V$ access for production support

  • From: "Herring Dave - dherri" <Dave.Herring@xxxxxxxxxx>
  • To: "Christian Antognini" <Christian.Antognini@xxxxxxxxxxxx>
  • Date: Sun, 3 Sep 2006 09:13:16 -0500

Welllll, I'd like to say I had a great reason, but so far I've only come
up with being paranoid.  I guess I could create a role and grant privs
on those V_$ views I need to, then grant the role to those needing
access for production support.  Sure a lot easier than creating wrapper
procedures per SQL statement!

Glad I asked.

Dave Herring, DBA
Acxiom Corporation
3333 Finley
Downers Grove, IL 60515
wk: 630.944.4762
"When I come home from work and see those little noses pressed against
the windowpane, then I know I am a success" - Paul Faulkner
> -----Original Message-----
> From: Christian Antognini [mailto:Christian.Antognini@xxxxxxxxxxxx]
> Sent: Sunday, September 03, 2006 2:49 AM
> To: Herring Dave - dherri
> Cc: oracle-l
> Subject: RE: V$ access for production support
> Dave
> > Ideally
> > they'd have access to V$TRANSACTION and V$SESSION to get basic
> > transaction information to track progress when it seems to be
> > running long, but I'm reluctant to start granting access to V$ views
> > on a production database.
> Which is the reason? The only security issue I see is that the support
> guys are able to see literals and, to some extents, bind variables
> are in the SGA. But if they have access to the data as well, this
> doesn't increase, usually, the amount of information they can
> So, it would be interesting to know why you don't want to give access
> those views.
> Chris
The information contained in this communication is confidential, is
intended only for the use of the recipient named above, and may be legally

If the reader of this message is not the intended recipient, you are
hereby notified that any dissemination, distribution or copying of this
communication is strictly prohibited.

If you have received this communication in error, please resend this
communication to the sender and delete the original message or any copy
of it from your computer system.

Thank You.

Other related posts: