|
Poor Man's Data Vault
That's what I'm calling it anyway.
Part I. Part II. Part III. I've started the project on Google Code The goal is simple, have a simple, easy to use version of Oracle's Data Vault. By no means is this trying to replace their product, it's just a simple solution to helping lockdown your Oracle database.I've read through a bit of Oracle's documentation on Data Vault and it seems like pretty cool stuff. I started this as something simple for our environment and was told it resembles (loosely) Data Vault by a friend. So check it out if you want. Feedback, both good and bad, is welcome and appreciated. As the Generalissimo stated, I'm a big boy. Labels: oracle, pmdv, security ¶ 3/04/2009 10:12:00 PM 
Comments:
Yeah, you missed a great presentation at SOUG in Feb. David Knox talked up Data Vault heavily. I wouldn't have drawn the connection between what you have there and Data Vault on my on ... but YEAH I can see the connection now. The one big difference I see is that while your solution restricts DDL, Data Vault has the ability to restrict the range of activity from (least restrictive) only certain DDL requests all the way up to simple selects (most restrictive).
Mine doesn't go that far yet. It did start out as DDL only but it's morphed into roles now. I imagine privileges, both system and table level, will be right behind.
Post a Comment
I know auditing picks up a lot of this stuff, but for those privileges that only need to be temporary, you can easily see the report or have some job automatically go through and expire (revoke) those privileges. I've read somewhere (maybe Pete Finnegan's site) that that's a big hole, the revoking of privileges. I did miss that presentation. I was all set to go when everything got railroaded. Subscribe to Post Comments [Atom] Links to this post: <<Home |
Guest Authors
How To
OOW 10 - Free Passes
EBS Install Guide Learn OBIEE APEX: A Guide Cert: Administration I - 1Z0-052 Parallel Processing: DBMS_JOB Write File to Disk Populate Time Dimension DBMS_CRYPTO PL/SQL: Split URL Parameters Instrumentation: DBMS_APPLICATION_INFO
Popular
Why You Should Blog
RDBMS + NoSQL Articles Coding is Easy Fun With Linux Code Style Index Better than Tom Kyte? Previous Posts
Marshalling
Master of My Domain ORA-08177 - II Google Code ORA-08177 can't serialize access for this transact... Coding is Easy - II Coding is Easy No DDL in Production Environment - III OBIEE: Don't Change the Administrator Password! No DDL in Production Environment - II Code Projects
Archives
August 2007 /
September 2007 /
October 2007 /
November 2007 /
December 2007 /
January 2008 /
February 2008 /
March 2008 /
April 2008 /
May 2008 /
June 2008 /
July 2008 /
August 2008 /
September 2008 /
October 2008 /
November 2008 /
December 2008 /
January 2009 /
February 2009 /
March 2009 /
April 2009 /
May 2009 /
June 2009 /
July 2009 /
August 2009 /
September 2009 /
October 2009 /
November 2009 /
December 2009 /
January 2010 /
February 2010 /
March 2010 /
April 2010 /
May 2010 /
June 2010 /
July 2010 /
|
