Home » RDBMS Server » Security » exp/ imp security
exp/ imp security [message #137849] Sat, 17 September 2005 11:08 Go to next message
dnvs_praveen
Messages: 47
Registered: July 2005
Location: bangalore
Member

Hi

I exported scott users all tables into a file called scottschema.dmp and as a demo user i could able to import those tables. So where is security here?

How can scott users tables can be secured from other users?

Plz let me know the answer.

Regards,
praveen
Re: exp/ imp security [message #137861 is a reply to message #137849] Sat, 17 September 2005 17:59 Go to previous message
Mahesh Rajendran
Messages: 10707
Registered: March 2002
Location: oracleDocoVille
Senior Member
Account Moderator
who is this 'demo' user?
What roles/privs are granted to demo user?

export /import is just a method to transport data.
By default, only the schema owner can export his data.
A dba can export any schema.
So no other regular user (except a dba or a user who has specific roles/privs granted to export any data) is allowed to export data of another user.
So if the data was allowed to be exported, the security was compromised.
Once it was exported, anyone can import it.

oracle@mutation#exp test/test owner=scott

Export: Release 9.2.0.4.0 - Production on Sat Sep 17 18:42:53 2005

Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.


Connected to: Oracle9i Enterprise Edition Release 9.2.0.4.0 - 64bit Production
With the Partitioning option
JServer Release 9.2.0.4.0 - Production
Export done in US7ASCII character set and AL16UTF16 NCHAR character set
server uses WE8ISO8859P1 character set (possible charset conversion)
EXP-00032: Non-DBAs may not export other users
EXP-00000: Export terminated unsuccessfully



>>How can scott users tables can be secured from other users?
With respect to export/import, it is explained above.
Only scott or a dba can do the export.
After the export is done, ofcourse secure the dump file.
Previous Topic: Making packages visible to another user - Urgent
Next Topic: Keeping a history of the V$SESSION table
Goto Forum:
  


Current Time: Fri Mar 29 08:30:49 CDT 2024