DBAsupport.com Forums - Powered by vBulletin
Page 1 of 3 123 LastLast
Results 1 to 10 of 26

Thread: Users wanting SYS password

  1. #1
    Join Date
    Mar 2001
    Posts
    82

    Users wanting SYS password

    Hi,

    We have users requesting access to SYS.
    Even though it is on a development database, we think users should not be allowed to log in as SYS.
    Can anybody give me valid reasons why users should not have SYS access so I can present them with this?
    If I am wrong, and you think this is OK, please let me know.


    Thanks for your help

  2. #2
    Join Date
    Jan 2002
    Location
    Up s**t creek
    Posts
    1,525
    If you are the DBA it should be the users who need to justify thier need to have access to the SYS account, not the other way round!

    If developers need access to particular SYS objects the DBA should grant that privilege. It is the only way you will maintain control of the system.

    Regards
    Jim
    Oracle Certified Professional
    "Build your reputation by helping other people build theirs."

    "Sarcasm may be the lowest form of wit but its still funny"

    Click HERE to vist my website!

  3. #3
    Join Date
    Nov 2000
    Location
    greenwich.ct.us
    Posts
    9,092
    You could always grant DBA to their account. (Of course, I'd recommend against this...)
    Jeff Hunter

  4. #4
    Join Date
    Feb 2001
    Location
    Paris, France
    Posts
    809
    I hardly see why a user would like to connect as sys...

    There may be needs to connect as system, or at least to be granted select right on some system objects, but nothing more !

  5. #5
    Join Date
    Jan 2001
    Posts
    3,134

    Re: Users wanting SYS password

    Originally posted by DQuinn
    Hi,

    We have users requesting access to SYS.
    Even though it is on a development database, we think users should not be allowed to log in as SYS.
    Can anybody give me valid reasons why users should not have SYS access so I can present them with this?
    If I am wrong, and you think this is OK, please let me know.


    Thanks for your help
    I guess you want to practice your recovery techniques!!

    Ask them exactly what they want to do and then decide if it is do-able. Why even let them get used to having the keys to the castle if it is NEVER going to happen in production.

    Remember the horse goes before the cart,
    The lunatics should not run the asylem,
    USER is a 4 letter word, ect...

    MH
    I remember when this place was cool.

  6. #6
    Join Date
    Jul 2002
    Location
    California
    Posts
    128
    Users should never need the sys or system passwords. If the database is setup properly (Permissions/synonyms, etc...), they should never need or ask for that access...

    What's next - User's requesting root(Unix) or Administrator (Windows)?
    alapps

    Fast, Cheap, Reliable... Pick Two(2)

  7. #7
    Join Date
    Jun 2001
    Location
    Dublin, Ireland
    Posts
    66

    Talking

    You could tell them but then you'd have to kill them.


  8. #8
    Join Date
    May 2001
    Location
    San Francisco, California
    Posts
    511
    I had this problem from developers who wanted to install something from a CD that required a sys password. For example, if they working on an application called RMS 9.0 and would like to apply the latest patch.

    The solution is - either the DBA installs the application patch
    or he changes the sys password TEMPORARILY for their install to go through and change it back once the install is complete.

    For example change sys password to kris and change it back after an hour or so.
    Remember the Golden Rule - He who has the gold makes the rules!
    ===================
    Kris109
    Ph.D., OCP 8i, 9i, 10g, 11g DBA

  9. #9
    Join Date
    Mar 2001
    Posts
    82
    Alapps,

    Actually, one of the users asked me if she could have the password to our unix oracledba password !!!

  10. #10
    Join Date
    Jan 2001
    Posts
    3,134
    Shoot them, put 'em out of your misery!

    Users, jeez
    MH
    I remember when this place was cool.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Click Here to Expand Forum to Full Width