Post by BkiddoHi, looking at a table of sysloginroles, found several users with sa
and sso roles; besides sa and other extra account , isn't it a
security problem to find 8 or 7 users with this privileges assigned?
(newbie on sybase)
Sort of. It depends upon who defines "security problem". It may also
depend upon your staffing needs; do you have separate SA/SSO staff available
for your production requirements? In some cases it might be adequate to
have some staff with only the SSO role and they do the real security
checking whereas the staff with both roles do only SA work in actuality.
I use SQL-BackTrack and in order to do a logical dump/load of a database
both of those roles are needed. (A logical dump/load allows me to shrink a
database as well as compactify it since everything is compiled from
syscomments and all of the data is bcp'ed in. Also the object dependencies
are corrected.)
There is an ISUG Enhancement Request
(http://my.isug.com/p/is/vi/iid=2019&type=1) for an sa_read_only role that
would provide for an SA "look and see but don't touch" capability.
Apparently this is needed in some banking environments.