Salvador
Salvador

Reputation: 16482

Recommended ORACLE Role for user

Which role is recommended for an ORACLE user used internally by an desktop or web application?

This application makes queries, updates and inserts over only one schema.

Does there exist a default or recommended role for this task?

Upvotes: 2

Views: 185

Answers (2)

Will Marcouiller
Will Marcouiller

Reputation: 24132

Your application should have its own user account with proper required rights, the least it needs to perform its tasks succesfully.

Upvotes: 0

Vincent Malgrat
Vincent Malgrat

Reputation: 67722

If this is an application schema (a schema used by an application to connect to the database), you should grant it the minimum sets of rights:

  • create session privilege
  • individual SELECT, INSERT, UPDATE and EXECUTE privileges on the DATA schemas' objects

This is the basic set of rights your application should need to run. In most case it will be sufficient.

This solution supposes that the application schema will not own any DATA object. This is the safest method as this will let you control what you allow your application to modify (since you can't prevent the owner of an object to modify it).

If the application schema owns data tables, you will also have to grant it quotas on tablespaces.

Upvotes: 2

Related Questions