Users wanting SYS password

[DQuinn]

Hi,

We have users requesting access to SYS.
Even though it is on a development database, we think users should not be allowed to log in as SYS.
Can anybody give me valid reasons why users should not have SYS access so I can present them with this?
If I am wrong, and you think this is OK, please let me know.


Thanks for your help

[jovery]

If you are the DBA it should be the users who need to justify thier need to have access to the SYS account, not the other way round!

If developers need access to particular SYS objects the DBA should grant that privilege. It is the only way you will maintain control of the system.

Regards

[marist89]

You could always grant DBA to their account. (Of course, I'd recommend against this...)

[pipo]

I hardly see why a user would like to connect as sys...

There may be needs to connect as system, or at least to be granted select right on some system objects, but nothing more !

[Mr.Hanky]

Originally posted by DQuinn
Hi,

We have users requesting access to SYS.
Even though it is on a development database, we think users should not be allowed to log in as SYS.
Can anybody give me valid reasons why users should not have SYS access so I can present them with this?
If I am wrong, and you think this is OK, please let me know.


Thanks for your help

I guess you want to practice your recovery techniques!!

Ask them exactly what they want to do and then decide if it is do-able. Why even let them get used to having the keys to the castle if it is NEVER going to happen in production.

Remember the horse goes before the cart,
The lunatics should not run the asylem,
USER is a 4 letter word, ect...

MH

[alapps]

Users should never need the sys or system passwords. If the database is setup properly (Permissions/synonyms, etc...), they should never need or ask for that access...

What's next - User's requesting root(Unix) or Administrator (Windows)?

[bgill]

You could tell them but then you'd have to kill them.

[kris109]

I had this problem from developers who wanted to install something from a CD that required a sys password. For example, if they working on an application called RMS 9.0 and would like to apply the latest patch.

The solution is - either the DBA installs the application patch
or he changes the sys password TEMPORARILY for their install to go through and change it back once the install is complete.

For example change sys password to kris and change it back after an hour or so.

[DQuinn]

Alapps,

Actually, one of the users asked me if she could have the password to our unix oracledba password !!!

[Mr.Hanky]

Shoot them, put 'em out of your misery!

Users, jeez
MH