Pete Finnigan's Oracle Security Weblog

I just found an interesting entry in the Amis technology corner blog. The writer Lucas Jellema talks about the need to clear out user schema's when conducting workshops rather than just dropping the schema. This is an interesting point as often you may want to keep a schema with the user intact with all its privileges but not need to keep the objects. Training courses, workshops, seminars etc all spring to mind. I this scenario it is convenient to keep the user and all privileges rather than have to re-create them but the data and objects are not valid hence need dropping.

The script given is pretty simple and the writer talks about some of the problems with it, particularly in 10g with the recycle bin. I would also say that although it’s useful to use as no DBA privilege is needed, is keeping a schema and its privileges always correct? - During a training course a schema / user may inherit privileges throughout its use that are not valid for its use at the start. Maybe dropping the user is better after all. Still a useful discussion for me as I am currently just completing a training course on Oracle security and creating and removing schemas for students is part of my task in creating labs.