Tag Info

New answers tagged

0

Without specific setup, Oracle Database will not know anything about any domain type users you set up. In fact, that's kind of the point of having OS Authentication in the first place; the OS does the authentication, and the Database assumes that this Authentication is legitimate. If you're using OS authentication for users, you (or someone else in your IT ...


0

Try Extnded Events with query like this CREATE EVENT SESSION [CheckDmoQuery] ON SERVER ADD EVENT sqlserver.sql_statement_completed(SET collect_statement=(1) ACTION(sqlserver.database_id,sqlserver.username) WHERE ([sqlserver].[like_i_sql_unicode_string]([sqlserver].[sql_text],N'%sys.dm_%'))) ADD TARGET package0.asynchronous_file_target (SET ...


0

What you could do is use an Extended Event session to see what a particular user/group is running on the system:- CREATE EVENT SESSION [ExecutedQueries] ON SERVER ADD EVENT sqlserver.sql_statement_completed (ACTION (sqlserver.sql_text) WHERE sqlserver.username = '<USERNAME>') ADD TARGET package0.asynchronous_file_target (SET filename = ...


0

Security folks and IT managers should properly understand the way application implements permissions. Below are misunderstandings in this area which I've seen: A system implemented (not too long ago) where by default every one on a domain (several thousand users) had permission to not only connect to the database but also read/write any value in any ...


2

Facts Seriously, it's all about facts. I have less than six months of SQL experience, whereas the managers and former developers were working on this project for several years That means nothing to me. I'd rather work with a 6-month DBA that has the thirst for knowledge and engineering approach to databases, then an "experienced" person that thinks ...


10

Here's the line I like to use - it preserves everyone's dignity and lets everyone escape without finger-pointing: "Yes, that used to be a best practice, and..." It’s almost easier to explain that line in terms of what it DOESN’T do. It doesn’t dispute the speaker’s claim, because you don’t want to go down the rathole of arguing about whether or not the ...


-2

Be sure that your manager or team leader understands your point and is supporting you when you bring this up.


5

Ensure you have a mountain of documentation, both of your current system's flaws, and how to fix them. It's no use just saying "everything sucks bad" unless you have a plan, and can show real benefits to the business of making the change.


0

For example, if I have a simple website hosted on my computer, what is the guarantee that data will remain safe from physical elements (HD failure or any kind of hardware deficiency)? You can have a postgres high availability setup. You also need to avoid these things in order to be safe from database corruption: RAID controllers with faulty / worn ...


1

That is quite a broad question (and is likely to be closed as such so you might want to describe you situation in more detail), so I'll go for a broad answer in the hope it'll give you some keywords to help research further. You seem to be more concerned about data safety than security, but I'll touch on the latter anyway: basically make sure access to the ...


0

This is quite broad and the answer largely depends on how much your data is worth to you? If you are from Amazon and you are storing millions of credit card numbers, then loss and/or revealing that data to third parties could be potentially costly in terms of fines from regulatory bodies and loss of consumer trust and future customers. If they are the ...


0

If I'm not mistaken the default trace contains property changes to logins which should include an account being disabled. An article that walks though the various information you can get from the default trace. EDIT OK, already confirmed not much at all is captured with manipulating logins on an instance. So unless you had something already capturing the ...


0

That looks like a brute force living attempt. As it is coming from a publicly routable IPv4 address that implies you database server is visible to the world which is generally a bad idea. Of you need remote access for any reason (and there are valid reasons to need this, of course) then you should only open access through you firewall from a specific address ...


4

From the 12c docs: The SYS user is automatically granted the SYSDBA privilege upon installation. When you log in as user SYS, you must connect to the database as SYSDBA or SYSOPER. Connecting as a SYSDBA user invokes the SYSDBA privilege; connecting as SYSOPER invokes the SYSOPER privilege. Oracle Enterprise Manager Database Control does not permit you ...



Top 50 recent answers are included