or allow modification to the data only through stored procedures . compile
stored procedures in to another schema ( having dmp rites ) . Give execute
privilage to the gateway schema .




----- Original Message -----
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Friday, January 10, 2003 12:33 PM


> Val,
>
> One option is to provide access via an account that is not the owner of
> these objects but has all required DML privs but not DDL privs. If you
> cannot do this, you could always code in a Database level trigger for DDL
> and rap the Developer's knuckles when they do something out of turn. We
have
> a similar situation here (common password knowledge) but they know that I
> wield a big stick and have these reports...
>
> John Kanagaraj
> Oracle Applications DBA
> DBSoft Inc
> (W): 408-970-7002
>
> What would you see if you were allowed to look back at your life at the
end
> of your journey in this earth?
>
> ** The opinions and statements above are entirely my own and not those of
my
> employer or clients **
>
>
>
>
> -----Original Message-----
> Sent: Friday, January 10, 2003 11:50 AM
> To: Multiple recipients of list ORACLE-L
>
>
>
> In a n-tier system that connects to the database with JDBC, how does a DBA
> keep developers from modifying the application schema without the DBA's
> consent or knowledge in a centralized development environment?
>
> The developers can have their own personal database on their desktops to
> program/test with but we have a problem with them making changes to the
main
> development database as the application schema owner. They know/have the
> application schema username/password since it is used to make the JDBC
> connections to the database from the app server.
>
> Does anyone have links to defined change control processes that might
help?
>
> Thanks in advance!
> Val
>
> Valerie H. Webber
> Management Systems Designers, Inc
> Database Administrator
> [EMAIL PROTECTED]
> 704-566-5321
>
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: John Kanagaraj
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
> San Diego, California        -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
>
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: BigP
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to