Personal Opinion here: I don't use SYS or system for anything where it is not absolutely required. All of the DBA's have the DBA role granted to them & we log on as ourselves. This is simply so that we don't accidentally step on something really important. In general one should never create anything in the SYS schema since it won't get exported when you do a full database export. System is a little safer, but still.. I have seen a couple of "white papers" that have made statements such as "SYS and SYSTEM should be locked and never opened" as well as other similar alarming (to the pointy headed non-technical types) statements that indicate that disaster is waiting in the wings. All of them can be summarily dismissed as having been written by those who are similarly non-technical. BTW: Even if you are auditing, a DBA can eliminate the records in V$Audit of they wish.
Dick Goulet Senior Oracle DBA Oracle Certified 8i DBA -----Original Message----- Sent: Wednesday, November 12, 2003 3:05 PM To: Multiple recipients of list ORACLE-L We are being asked by Auditing to stop using the SYS, and SYSTEM accounts. They would like for us to create an Oracle Role with the same permissions a SYS and SYSTEM, then grant the role to each of the DBA's. Don't ask me why. Nothing is being audited in 99% of the databases. They just say it in a paper some where so they said we shouldn't use it. This seems like it would cause lots of problems with exports, imports, installs, etc... Has anyone had to deal with this type of request? Any potential problems with making the change? Thanks! Ron Smith -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Smith, Ron L. INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Goulet, Dick INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
