Val, One option is to provide access via an account that is not the owner of these objects but has all required DML privs but not DDL privs. If you cannot do this, you could always code in a Database level trigger for DDL and rap the Developer's knuckles when they do something out of turn. We have a similar situation here (common password knowledge) but they know that I wield a big stick and have these reports... John Kanagaraj Oracle Applications DBA DBSoft Inc (W): 408-970-7002
What would you see if you were allowed to look back at your life at the end of your journey in this earth? ** The opinions and statements above are entirely my own and not those of my employer or clients ** -----Original Message----- Sent: Friday, January 10, 2003 11:50 AM To: Multiple recipients of list ORACLE-L In a n-tier system that connects to the database with JDBC, how does a DBA keep developers from modifying the application schema without the DBA's consent or knowledge in a centralized development environment? The developers can have their own personal database on their desktops to program/test with but we have a problem with them making changes to the main development database as the application schema owner. They know/have the application schema username/password since it is used to make the JDBC connections to the database from the app server. Does anyone have links to defined change control processes that might help? Thanks in advance! Val Valerie H. Webber Management Systems Designers, Inc Database Administrator [EMAIL PROTECTED] 704-566-5321 -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: John Kanagaraj INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
