What DB roles are REALLY needed by the applications?

During our upgrade, the security / database guys at my office want me to lockdown the db accounts for portal, publisher, collab, anaytics, etc (also services, notification, security...all the alui related databases). They say that dbo is too privileged and I need to figure out just what the applications need and give them access.
My question is...what does each account REALLY need? Some accounts create tables (analytics). Is it sufficient for those accounts to just be given CREATE TABLE privileges? Can every other account just be given normal CRUD access?

fair enough.
Ali, where did you find the SQL scripts for Collab? Is it someplace I can view easily?
One comment would be that of course it would be fine for these accounts to have DBO during upgrades, etc, if that is the only time when these 'creating views, indexes, and SP's' are used...

Similar Messages

  • HT4946 Hi. i downloaded the last version osf ios7, but i skipped the part where i was supposed to sing in to iCloud, now i'm trying to restart my iphone and i can't,,, i don't know what to do i really need your help!!!

    Hi. i downloaded the last version osf ios7, but i skipped the part where i was supposed to sing in to iCloud, now i'm trying to restart my iphone and i can't,,, i don't know what to do i really need your help!!!

    Just go into settings>Icloud> then sign in there.

  • What roles are required to run the export import?

    Hi,
    I want some info on roles are required to run the export import.
    I have done the following in sys user:
    GRANT EXP_FULL_DATABASE TO IMP_TEST
    GRANT IMP_FULL_DATABASE TO IMP_TEST
    But Doing the above command the IMP_TEST will get all priviles (also the system tables)
    Is there any mechanism to restrict the user to export and import only the tables not anything?
    Thanks and Regadrs

    Hi!
    If you create a user like this
    CREATE USER imp_test identified by password;then the user will be able to import or export only its own schema. If you grant the exp_full_database and imp_full_database roles to this user like you did then the use will be able to export or import the hole database (with SYS schema). But as far as I know you can't set any more restrictions to the user.
    yours sincerely
    Florian W.

  • HT201250 Hi, I hope this question won't seem too basic but if I want to use a new larger external drive for my time machine backups, will it do a new full backup the first time I plug it in and if so, do I really need all the old backups on my smaller ext

    Hi, I hope this question won't seem too basic but if I want to use a new larger external drive for my time machine backups, will it do a new full backup the first time I plug it in and if so, do I really need all the old backups on my smaller external drive?

    50maz wrote:
    Hi, I hope this question won't seem too basic but if I want to use a new larger external drive for my time machine backups, will it do a new full backup the first time I plug it in
    Yes, it will do a full backup.
    and if so, do I really need all the old backups on my smaller external drive?
    Only if you want to be able to go back in time to those previous Time Machine backups.  When you plug in the new larger external drive, you will only be able to go back as far as the first day you plugged it in and ran the first Time Machine backup on it.

  • Users are created but Roles are not Provisioned in the Target System

    Hi,
    It would be great if somebody would provided solution to my problem. The problem is when I try to create the Users in Identity Managment UI then the Users are created in the Target systems but the Roles are not provisioned to the Users.
    In the provisioning job SetABAPRole&ProfileForUser,
    It is says In the Error putNextEntry failed storing
    Exception from Modify operation:com.sap.idm.ic.ToPassException: User does not exist
    MSKEY 58437
    Please note the When we create the User, the user is created however the Roles is not provisioned to the user.
    Regards,
    Hakim

    Hello Nits,
    since this thread is from 2010 and the OP was logged on last in 2012 (as you can see in the profile), I don't think you'll get an answer here.
    Please create a new thread to explain your problem (with version and SP numbers, logs etc). You can add a link to this thread to show, that the problem is similar.
    Regards,
    Steffi.

  • Ok so I have OS X Lion now and this is what I get:  "You can't open the application Lexmark All In One Center because PowerPC applications are no longer supported."

    ok so I have OS X Lion now and this is what I get:
    "You can't open the application Lexmark All In One Center because PowerPC applications are no longer supported."

    look for the latest drivers on the maker's website.
    check it in your list. this is a lexmark issue not a lion issue.
    http://support.lexmark.com/index?page=content&id=OS22&locale=EN&userlocale=EN_US

  • What AC adapter do I need for the Sat Pro A30?

    What AC adapter do i need for the Satellite pro A30, it will not charge and as it has a loose connection on the plug.

    Hi,
    in the specs I found this:
    up to CPU 2.8GHz PA3165U/E-1ACA Autosensing AC Adaptor - 0.52kg - 90W - 100~240V 50/60Hz (Universal) - DC 19V 4.74A -- over 2.8GHz PA3290U 120W
    Bye

  • Database design for Role/User based access to the application..

    We want to implement Role/User based access to the application.
    Can anyone tell me whats the optimized way of storing the data {User, Role, Access_Type etc} in the database.. The Roles might get added in the future so i dont want to maintain a single table to map User-Access_Type..
    Access_Type -->
    AT_1 | AT_2 |AT_N |
    ------- |------- |------- -|------|
    User_1 | | | |
    ------- |------- |--------|------ |
    User_2 | | | |
    ------- |------ -|--------|------ |
    I want to maintain a table which will map user with the Access_Type, which should be mainatained in a different table..
    Any help would be highly appreciated..
    Thanks in Advacnce,
    Shridhar..

    You find your answer here:
    http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html

  • What additional resources are required to do the TestStand training courses I and II?

    I have the TestStand course manuals for courses I and II and am currently trying to refresh what I learned a couple of months ago when I took the courses.  I'm at the point where almost every VI required comes up broken because additional libraries are required in LabVIEW.  Why aren't the additional required libraries listed in the course documentation?  What are the additional libraries and how do I get them?

    Hi there!
    If I had to guess I would say that you're missing the TS support API libraries for LabVIEW... Since those are the only 'special' libraries used by any of the examples in the TestStand 3.x or 4.x training manuals.
    I'm going to assume that you have some recent version of LabVIEW (8.x?) and some recent version of TestStand (3.x) installed? Unless you took the NI training course more than a few years ago, in which case you might need earlier version of TS, LabVIEW version really shouldn't matter. Evaluation copies ought to be sufficient so I wouldn't blame those... 
    (If you don't have LabVIEW at all. Make sure you have the correct LabVIEW Run Time Engine version, as that's a pretty common source of TS errors... But without LabVIEW half of the exercises in the training manual are moot anyway...)
    In your LabVIEW install path, (C:\ program files etc...\LabVIEW 8.x\)  look for the folder path "vi.lib\addons\TestStand\", it ought to be full of a few *.llb files that TS would furnish to LabVIEW when the product is installed.  Sometimes when you install things in an unexpected order, or if you have multiple LVs installed, these items don't get put where you expect.
    If the folder is empty, copy what you need from... the TestStand install path (C:\ program files etc...\TestStand x.x\) folder "AdapterSupport\LabVIEW" and restart LV. This might get you up and running.
    If the folder is not empty. Try running a MassCompile from your LabVIEW Tools ->Advanced menu, there might be a version incompatibility issue...
    Feel free to send me an email if you're still stuck. But there aren't any external dependencies/hardware drivers needed for the TS training sequences...
    Cheers!
    --Elaine R.
    www.bloomy.com
    Cheers,
    Elaine R.
    www.bloomy.com

  • [Solved] Which are really needed?

    Hello all,
    After spending some time with Crunchbang and minimal installations of Ubuntu, I'm thinking about trying out Arch once again - and staying this time, that is. I already managed to install and configure Arch twice before, so it's not that I'm unable to do so. I was just wondering, which of the daemons mentioned in the Beginners' Guide (alsa, network daemons, udev, hal etc) are really necessary? This time I want to keep everything as slick and clean as possible, so I'd like to know which daemons I can remove / don't add.
    I only need/want the daemons that will give me, the reguler computer user, a workable environment. (Think like: network (wireless and wired, when wireless isn't available); automount of memory cards, USB sticks and external HDD's; sound; using a wireless USB mouse...)
    Oh, almost forgot to mention: I'm using a laptop, if that matters. I hope I'm not asking something incredibly stupid or non-accomplish-able. Thanks in advance!
    Last edited by Unia (2010-10-10 18:42:16)

    What exactly does crond do? When googling, I only find cron. Is it the same?
    Also, when I install a network manager, wicd for example, and set it to automatically connect with my network, do I need the network daemon?
    Last edited by Unia (2010-10-10 18:27:53)

  • Roles are not updating in the GRC 10.0 System.

    Hi
    We had created Z role in ECC system and Ran the Sync Jobs in the GRC 10.0 System .
    But the role created in backend System(ECC) was not updating in the roles of the GRC system.
    Can any one provide right solution.
    Thanks

    Hi Wipro Basis Team
    On running the sync job what are you expecting to occur when you say the roles are not updating in GRC System? I wonder if you are expecting a different outcome to the purpose of the sync jobs.
    Regards
    Colleen

  • What model HD are they putting in the new Mac Pro's?

    What model hard drives are they putting in the new Mac Pro's? I need to purchase a second drive in anticipation of a 2.8 I'm ordering and I want to get the same brand and model.

    Mine came with the Seagate ST3320820AS_P; however, WDs are also in the mix. And don't forget that the BTO options allow increasing drive size; those may be different makes as well.
    See this thread on MacRumors forum: http://forums.macrumors.com/showthread.php?t=432423
    Bottom line is that if it's important that they match, wait 'till you can open the box and know for sure.

  • What does a MAC really need to do justice to FCE and FCEHD?

    I need to purchase a new laptop. I want to use it to prepare 45 min documentaries. The original video will have audio filmed with it. I will want to add more narration, music, more photos, ie. the works. I have been using iPhoto and find that video containing audio and background noise, plus added narration, photos, and background music limits me to 20-30 min DVDs before stuttering occurs. What hardware do I need to do a professional job?
    G4 Dual 1 GHz BUS 133 MHz using an external hard drive for iMovie   Mac OS X (10.4.8)   all software updates
    G4 Dual   Mac OS X (10.3.9)   all software updates

    Hi(Bonjour)!
    A laptop is not for professionnal video editing in a regular basis ( at least in your home editing room).
    If you need absolutely the portability, that's Okay, but keep in mind that Hard Drives of laptop are slower than one in desktop machine. An external Hard Drive is recommended.
    A desktop machine is less fragile, has more connectors on it and is generally faster that the "laptop" little brother (in a head to head comparaison at the same introducing date, the laptop are one generation behind ).
    A desktop machine can be easily upgraded and the parts are less expensive.
    A good mic is a must to catch good voice overs.
    Michel Boissonneault

  • HT201442 I'm still having error "the iphone "iphone" could not be restored. An unknown error occurred (3194). Please advice as i really need of the phone for working. Thank you!

    To whom I may concern,
    It been a year + after I move to Thailand for my job vacancy. Previously i have no problem resetting to factory default setting.
    I really need to have my iphone to be working as I need them for my working. Your advice is really very important to me.
    Thank you,
    Tommy Low

    http://support.apple.com/kb/TS3694#error3194
    Error 1004, 1013, 1638, 3014, 3194: These errors may be the result of the connection to gs.apple.com being redirected or blocked. Follow these steps to resolve these errors:
    Install the latest version of iTunes.
    Check security software. Ensure that communication to gs.apple.com is allowed. Follow this article for assistance with security software. iTunes for Windows: Troubleshooting security software issues.
    Check the hosts file. The restore will fail if there is an active entry to redirect gs.apple.com. FollowiTunes: Advanced iTunes Store troubleshooting to edit the hosts file or revert to a default hosts file. See section "Blocked by configuration: (Mac OS X/Windows) > Rebuild network information".
    Try to restore from another known-good computer and network.
    If the errors persist on another computer, the device may need service.

  • What antivirus protection do I need for the iPad?

    I am seeing some unusual activity after receiving an email.  What antivirus protection should we be considering for the ipad2?

    None - there are no viruses for the iPad (or iPhone or iPod Touch), and therefore there are no antivirus apps available in the iTunes App Store

Maybe you are looking for

  • Character encoding in Web Dynpro source code

    Hi all, I want to use special characters like "äüß" in Web Dynpro java code and can't find a possibility to specify the character encoding (ISO-8859-1) for Developer Studio Web Dynpro source editor. After rebuilding or compiling the code looks like "

  • Advantage of SQL Query (Strucutred Query) over SQL Query

    What is the advantage of a Region Type 'SQL Query (Structured Query)' over 'SQL Query'? I just became curious when comparing the results of the Master Detail Wizard, and the Report and Form Wizard.

  • Loading Apps

    When I try to download an app it asks me to put in my e-mail address and password. When I do it does not recognize the e-mail address. What do I do now? Solved! Go to Solution.

  • Photoshop working extremely slow

    I just downloaded creative cloud yesterday. Now my photoshop cs6 and photoshop cc are both working extremely slow, and sometimes will just stop working. I have an iMac desktop. HELP!!!

  • Sequences in toplink-Urgent!

    Hi, I have a Database table which has a column whose value is to be automatically generated from a sequence called 'SEQ_PERSON_ID'.I gave the sequence name,table and id in the workbench but i am getting an error internal Exception: java.sql.SQLExcept