Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
Cookie Policy:We only use essential cookies on small sections of this website. For details see here.

Welcome, Guest. Please Login.
Nov 20th, 2017, 1:36am
News: If you would like to register contact the forum admin
Home | Help | Search | Members | Login
   Pete Finnigan's Oracle Security Forum
   Database Security
   Database Security
(Moderator: Pete Finnigan)
   How To Block Super User In Particular Time.
« Previous topic | Next topic »
Pages: 1  Reply | Notify of replies | Send Topic | Print
   Author  Topic: How To Block Super User In Particular Time.  (Read 1758 times)
vibhu
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile |

Gender: male
Posts: 8
How To Block Super User In Particular Time.
« on: Aug 20th, 2010, 11:09am »
Quote | Modify

Hey Guys...
 
I really found this website very helpful. But here this time i got stuck, I just simply want to know the way to block the "Super User" or "DBA " to access the Oracle Database.  
Definitely their might be a way out for this. Is there any method at the time of installation of database we can provide the agreement date. So that after that date the user and the super user/DBA will not able to fetch/access the data from database.
 
Definitely their will be a way to resolve this...
It will be really appreciated if will get the solution for this.
 
Thanks in advance.
 
Best Regards
Vibhu
IP Logged

wer
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: How To Block Super User In Particular Time.
« Reply #1 on: Sep 2nd, 2010, 9:48am »
Quote | Modify

Hi Vibhu,
 
This is virtually impossible unless you rely on human processes as well. The users can be blocked effectively but you cannot block SYSDBA. You could block a user who is a lower level but a person who is a DBA. i.e. they do not have the ability to log on as SYS, oracle, osdba, SYSDBA in the database and also they do not have the ability to simply escalate their privileges back to that level.
 
The database privilege model needs to be well designed before you can apply technical solutions to block access.
 
It sounds from your description that you want to populate a database and then stop any changes, i.e. a fixed read only database?
 
If so then consider a standby database that can be opened readonly?
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Pages: 1  Reply | Notify of replies | Send Topic | Print

« Previous topic | Next topic »

Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board