Why and how oracle allows this?

Hi
Can someone please clear my understanding on this?
i had installed oracle 10g on my personal laptop a while ago and i have forgot the password,
then by searrching in net i found this way of logging in from dos prompt
"/ as sysdba"
i would like to know
-how oracle allows this?
-whether anyone who logs into my system can do this?
-whether it is possible to do like this in any production environment? i hope it wont be, how they prevent this in production database
Thank you
MJ

-how oracle allows this?
# yes, this is the way Oracle works.
-whether anyone who logs into my system can do this?
# If you can login to the OS as the user who owns and/or runs the database software you can login to the database without a username/password. If you login to the OS as another user you can't login to the database without a username/password. Not sure why you are so worried about a database on your personal laptop ? If you don't want anyone to access your data, don't give them the OS password (or you could encrypt your data).
-whether it is possible to do like this in any production environment? i hope it wont be, how they prevent this in production database
# yes, production systems are like this also. This is why you should not let anyone know the password of the OS user that runs the database. If you give out the OS password, then you have given away access. This security is good enough for banks and governments, so it should be good enough for you.

Similar Messages

Maybe you are looking for