Lock user accounts [message #515583] |
Tue, 12 July 2011 04:59  |
|
Hi,
I have a doubt in locking user account in oracle database.
I was told to drop some unusable users in database which my clients dont require them.I verified the dependent objects of those users but not sure if these users can be dropped.
Instead can i make those user accounts locked so that they cannot connect to database ?
Would there be any impact on database performance if i lock those user accounts?
Is locking an account and dropping users is similar in anyway ?
Need your valuable input.
Thanks
|
|
|
Re: Lock user accounts [message #515588 is a reply to message #515583] |
Tue, 12 July 2011 05:08   |
cookiemonster
Messages: 13894 Registered: September 2008 Location: Rainy Manchester
|
Senior Member |
|
|
balaji14 wrote on Tue, 12 July 2011 10:59
Instead can i make those user accounts locked so that they cannot connect to database ?
Yes
balaji14 wrote on Tue, 12 July 2011 10:59
Would there be any impact on database performance if i lock those user accounts?
Why would there be?
balaji14 wrote on Tue, 12 July 2011 10:59
Is locking an account and dropping users is similar in anyway ?
Not really
|
|
|
|
Re: Lock user accounts [message #515591 is a reply to message #515588] |
Tue, 12 July 2011 05:11   |
 |
Littlefoot
Messages: 21648 Registered: June 2005 Location: Croatia, Europe
|
Senior Member Account Moderator |
|
|
When you lock an account, all you did is to restrict access to it. All its objects (tables, procedures, etc.) are still there (and accessible from other users, if privileges have been granted to them).
If you drop a user, all objects are also dropped.
If these users (that are no longer needed) are not related to other users (for example, their tables used in referential integrity constraints and similar), you might export these schemas, backup export files, and then drop users.
|
|
|
|
Re: Lock user accounts [message #515614 is a reply to message #515598] |
Tue, 12 July 2011 07:33   |
|
I have one question here.
Can i drop the same users in production environment as i found out the list of users to be dropped/ their account should be locked based on analyze in test environment ?
Pls advice.
Thanks
|
|
|
|
Re: Lock user accounts [message #515619 is a reply to message #515616] |
Tue, 12 July 2011 07:59   |
cookiemonster
Messages: 13894 Registered: September 2008 Location: Rainy Manchester
|
Senior Member |
|
|
To put it another way - there is no way we can tell if dropping those users will cause issues.
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.
|
|
|
|
|
|
Re: Lock user accounts [message #516201 is a reply to message #515619] |
Fri, 15 July 2011 08:09   |
cookiemonster
Messages: 13894 Registered: September 2008 Location: Rainy Manchester
|
Senior Member |
|
|
I take it you didn't bother doing this then:
cookiemonster wrote on Tue, 12 July 2011 13:59
It'll only cause issues if the users are being used by someone or something, but that you have to work out for yourself with proper analysis.
Maybe you should
|
|
|
|