There is a resolution 19368 on customer connection which discusses which rights the SYSADM account requires and which ones can be revoked. Though it was somewhat better formatted when I retrieved it in 1999. It was last modified in 2002.

I am curious how you turn off the create user? I didn't think you could do that, only control the grants that take place.

A little gotcha I ran into a couple of years ago when I revoked access was that had errors in app designer. The DLL referenced DBA_TABLES (oops) I think that was in V7.0.

David Davis



From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
Subject: Re: Peoplesoft & Oracle
Date: Tue, 28 Jan 2003 14:39:21 -0800

Lisa,
Sounds like a default install of PeopleSoft. Step 1 that you can do is
re-assign everyone to use a real temp tablespace. Step 2 is break up that db
onto seperate spindles. Step 3 is to turn off autoextend exept for those
tablespaces that are nearing say 90% full, then set autoextend to something
sensible. As far as the user accounts are concerned that's normal. I for one
would revoke DBA from sysadmin & grant "alter any user" instead. Afterwards, I'd
get into PeopleTools & turn off the "creat user" function. I could write more,
but this should keep you VERY busy.

Dick Goulet

"Koivu; Lisa" <[EMAIL PROTECTED]> wrote on 1/28/03 1:08 pm:

Hello everyone,

My apologies for bombarding the list with more questions than answers as of
late. This one is pretty desparate.

For those of you who support Peoplesoft databases - Are there any websites that
you frequent to check for quirks, weird anomalies, etc. related to your specific
Peoplesoft/Oracle combination?

I've just inherited this environment. It's Oracle 8.1.7 on AIX. I don't know
the version of AIX and I don't know the version(s) of the Peoplesoft modules
being used. However I am seeing some very weird things - not the least of which
is every tablespace is dictionary managed, all are on autoextend, there are 600
open database accounts but it looks like the app only connects as SYSADM, all
users have SYSTEM for default/temp ts, the entire freaking database is on one
disk, all redologs (one in each group) are on one disk, etc., etc., etc. The
list goes on. I'm afraid to turn this environment upside down and fix it
because management is only interested in keeping the system alive, not improving
it. The previous DBA is elusive at best, probably because I yelled at him last
year after catching him creating objects on the fly in my databases :)

I'll do the obvious things like add redologs and check backup and recovery, etc.
User error is extraordinarily high in this environment. Everything else I am
afraid to touch without doing my homework first. Any websites, suggestions,
comments, etc. would be greatly appreciated.

The only good thing to come of all this is I'M BAAAAAAAAAAAAAACK in Unix again
!!! Woo Hoo!!!!!!!

Lisa Koivu
Oracle Database Administrator
Fairfield Resorts, Inc.
5259 Coconut Creek Parkway
Ft. Lauderdale, FL, USA 33063



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">




<META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6249.1">
<TITLE>Peoplesoft &amp; Oracle</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->

<P><FONT SIZE=2 FACE="Arial">Hello everyone, </FONT>
</P>

<P><FONT SIZE=2 FACE="Arial">My apologies for bombarding the list with more
questions than answers as of late.&nbsp; This one is pretty desparate. </FONT>
</P>

<P><FONT SIZE=2 FACE="Arial">For those of you who support Peoplesoft databases -
Are there any websites that you frequent to check for quirks, weird anomalies,
etc. related to your specific Peoplesoft/Oracle combination?&nbsp; </FONT></P>

<P><FONT SIZE=2 FACE="Arial">I've just inherited this environment.&nbsp; It's
Oracle 8.1.7 on AIX.&nbsp; I don't know the version of AIX and I don't know the
version(s) of the Peoplesoft modules being used.&nbsp; However I am seeing some
very weird things - not the least of which is every tablespace is dictionary
managed, all are on autoextend, there are 600 open database accounts but it
looks like the app only connects as SYSADM, all users have SYSTEM for
default/temp ts, the entire freaking database is on one disk, all redologs (one
in each group) are on one disk, etc., etc., etc.&nbsp; The list goes on.&nbsp;
I'm afraid to turn this environment upside down and fix it because management is
only interested in keeping the system alive, not improving it.&nbsp; The
previous DBA is elusive at best, probably because I yelled at him last year
after catching him creating objects on the fly in my databases :)</FONT></P>

<P><FONT SIZE=2 FACE="Arial">I'll do the obvious things like add redologs and
check backup and recovery, etc.&nbsp; User error is extraordinarily high in this
environment.&nbsp; Everything else I am afraid to touch without doing my
homework first.&nbsp; Any websites, suggestions, comments, etc. would be greatly
appreciated.&nbsp; </FONT></P>

<P><FONT SIZE=2 FACE="Arial">The only good thing to come of all this is I'M
BAAAAAAAAAAAAAACK in Unix again !!! Woo Hoo!!!!!!!</FONT>
</P>

<P><FONT SIZE=2 FACE="Tahoma">Lisa Koivu</FONT>

<BR><FONT SIZE=2

*************************
This message has been truncated. The entire message is available on your desktop
e-mail client.

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author:
INET: [EMAIL PROTECTED]

Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: david davis
INET: [EMAIL PROTECTED]

Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).

Reply via email to