We help IT Professionals succeed at work.

What priviledges do i need to give oracle binaries eg sqlplus so other users aprt from oracle can use

hraja77
hraja77 asked
on
1,777 Views
Last Modified: 2008-01-09
What priviledges do i need to give oracle binaries eg sqlplus so other users aprt from oracle can use them - without giving away too much priviledge
Comment
Watch Question

Mark GeerlingsDatabase Administrator
CERTIFIED EXPERT

Commented:
Basically, the "execute" privilege, but that vairies a bit by O/S.  What is your server O/S?
CERTIFIED EXPERT
Top Expert 2008

Commented:
In Oracle exists the so called Schema/User.
You can grant rights to every Schema/User.
Privileges could be grant using Roles (set of priveleges).
You never should grant the role DBA to any user.
The role PUBLIC is a set that doesn't gives too much rights.

Especially for SQL*Plus it is possible to exclude some operations,
like update, delete.
Mark GeerlingsDatabase Administrator
CERTIFIED EXPERT

Commented:
Schwertner and I understood your question differently.  Are you asking about O/S permissions for executing Oracle utilities (like SQL*Plus, SQL*Loader, Export and Import) from the operating system or are you asking about permissions inside the database?
CERTIFIED EXPERT
Top Expert 2008

Commented:
The file privileges to the binaries are given to the Oracle user
by the installation of the product.
No other users can access the binaries because other users
have to be granted OS roles that give them the right to
manipulate the instance in an unwanted way.
Normaly Oracle users are accessing Oracle not using binaries
on the server. They correspond with the Listener using
TCP/IP protocol via some port (1521 commonly) on the server.

Author

Commented:
hi thanks for the response - i'm asking about the o/s permisssions like sqlplus/ sqlloader

Author

Commented:
thanks schwertner but which files would another user need permission to - to get access to sqlplus ?
do you know ?

Author

Commented:
i get map:permission denied n invoking sqlplus from another user than oracle
Mark GeerlingsDatabase Administrator
CERTIFIED EXPERT

Commented:
Can you tell us which server O/S you have?  That would help!

Author

Commented:
its aix 5l and oracle 10g

Author

Commented:
i want to chmod 755 just the files that i need to and not all the binaries of oracle - can you help;

thanks
H
I would suggest to start with a good paper related to security by Arup Nanda : http://www.oracle.com/technology/pub/articles/project_lockdown/index.html
There are issues related to os privileges on oracle executables( http://www.oracle.com/technology/pub/articles/project_lockdown/index.html )
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
i'm getting this error at the moment when executing from a different user:
note the initial permission denied !!!

wdfndwp:/oracle/product/10.2.0>
wdfndwp:/oracle/product/10.2.0> sqlplus bahiah@ndwp
991446 : map : Permission Denied
991446 : map : Permission Denied
991446 : map : Permission Denied

SQL*Plus: Release 10.2.0.3.0 - Production on Tue Oct 9 15:53:51 2007

Copyright (c) 1982, 2006, Oracle.  All Rights Reserved.

Enter password:
ERROR:
Error while trying to retrieve text for error ORA-12154

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.