Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Creating a user without sysdba privilege within a procedure?

Status
Not open for further replies.

229257

Programmer
Apr 23, 2002
54
GB
Hi,

I have heard it is possible to create a user within a procedure then you can grant access to this procedure to a normal user allowing them to create users. How could this be done? I tried always to do it but no joy, any ideas? This would be a big help,

Thanks
229257
 
229257,

I have a very uneasy feeling about this thread...it flies in the face of a well-behaved, well-administered database. I, personally, elect to not make such information available since (IMHO) it is tatamount to hacking. If you or someone else can convince me that a DBA can still protect her/his database from security violations whilst supporting such a procedure, then I'd be willing to reconsider its value.

[santa]Mufasa
(aka Dave of Sandy, Utah, USA)
[ Providing low-cost remote Database Admin services]
Click here to join Utah Oracle Users Group on Tek-Tips if you use Oracle in Utah USA.
 
Hi,

I can understand your reservations about such a question but there is a genuine reason for this. I would like our help desk team to be able to create users to take the load of us DBA's and to decrease the time a user has to wait for their login. I dont want to give them sysdba for obvious reasons as we will completely loose control.

I figure if i can get this to work in a procedure then give the help desk team (and only them) access to this procedure they will be able to do this. Because they are using the procedure they will not be able to create users from the command line it will allow us to structure the usernames as we would like them,

Thanks
229257
 
Hi,
While I understand your desire to take some of the load from overworked ( as always ) DBAs, this will be OK only as long as ALL users have the same roles, etc.

Why not just give the CREATE USER system right to a user account for the help desk to use?

Then you can send them the other details ( or a script) to set the default stuff for that user.





[profile]

To Paraphrase:"The Help you get is proportional to the Help you give.."
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top