I am not an oracle DBA but is there any easy way to determine where on the server, the actual database file(s) (is there more than one, for SQL server it is mdf and ldf?) are housed? i.e. a command or a query?
What are the risks if the datbase files are on say for example a share that everyone group has access to, can users copy the database files and gain access to the data - or is that a bit far fetched?