Re: Where's your DBA access level?
From: pSeries AIX Geek (aixgeek_at_YAHOO.COM)
Date: 09/11/04
- Previous message: Antonio Vázquez: "Re: Checking if the rootvg disk is mirrored"
- In reply to: Bob.Kelley_at_BRINKSINC.COM: "Where's your DBA access level?"
- Next in thread: Gene Sais: "Re: Where's your DBA access level?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Sat, 11 Sep 2004 09:52:57 -0700 To: aix-l@Princeton.EDU
I find that most DBAs are more cautious than
sysadmins, and even if they have root access, rarely
use it except for things they need.
For low-key production systems on down, I have no
problem letting know it's there [actually, I just
grant them full sudo rights and let them tell me when
they want them scaled back.]
The risk that they might do something dumb is
mitigated by the time it saves me.
- pAG
--- Bob.Kelley@BRINKSINC.COM wrote:
> How many of you guys out in industry give your DBAs
> unix level access to
> your servers? In production? Development? I don't
> recommend giving login
> access to database administrators regardless of unix
> experience for several
> reasons.
>
> Oracle, for example, has several tools with which
> you can administer Oracle
> itself, almost negating the need for a unix login
> altogether. One of these
> on the robust/high-end being Enterprise manager, and
> on the other
> simple/low-end being the Oracle client.
>
> Another issue I consider is server accountability
> within a given IT
> organization. How secure have you made your server?
> Ultimately, to
> executives outside IT, who gets the black eye if
> there is a configuration
> issue, or the common accidental file deletion or
> typo? Is it the individual
> DBA? The DBA group? Or, is it most likely going to
> be the infrastructure
> group responsible for the server and its
> availability overall? When you
> take yourself out of the comfort zone of your IT
> knowledge, I think in most
> companies, its going to be the latter.
>
> Can I log/connect in to DB2? Yes, I most certainly
> know how. Can I do a
> table query? Of course I can. Am I certified? Does
> the DBA responsible for
> that server want me to do these things? No, they
> don't and for very good
> reason. Tiered access...that's not really the point
> here.
>
> Bobby Kelley Jr.
> 972-877-5341
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
- Previous message: Antonio Vázquez: "Re: Checking if the rootvg disk is mirrored"
- In reply to: Bob.Kelley_at_BRINKSINC.COM: "Where's your DBA access level?"
- Next in thread: Gene Sais: "Re: Where's your DBA access level?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|