Results 1 to 2 of 2
  1. #1
    Join Date
    Sep 2008
    Posts
    41

    Unanswered: Expiring/Locking/Disabling roles?

    Hi,

    I've run a password cracker that confirm that I have some weak user password and roles and some Oracle default users that I don't require and thus have to expire and lock.

    I've actioned the weak passwords and expire/lock default Oracle users that I don't need. My question is, how about the roles, can I disable/lock then without dropping them? I don't want to dropped them for the meantime as I may use the Oracle users later on?

    Any feedback will be very much appreciated. Thanks.

  2. #2
    Join Date
    Dec 2003
    Location
    Oklahoma, USA
    Posts
    354
    You could always add (or change) a password associated (one that none of the users know) with the role...

    ALTER ROLE your_role IDENTIFIED BY secret_password;

    When you are ready for the ROLE to be used again without a password...

    ALTER ROLE your_role NOT IDENTIFIED;
    JoeB
    save disk space, use smaller fonts

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •