230 likes | 401 Views
DBA: Security and Backups. Agenda. Understand the need for security. Learn about System Permissions and Object permissions. Understand the purpose of Roles. Explore Security-focused SQL. Explain backup and restore options. Data Admin –vs- DB Admin. Data Administration.
E N D
DBA: Security and Backups Guide to Oracle 10g
Agenda Understand the need for security. Learn about System Permissions and Object permissions. Understand the purpose of Roles. Explore Security-focused SQL. Explain backup and restore options.
Data Admin –vs- DB Admin Data Administration Database Administration Owns the Database Technical function Policy &Procedure Enforcement DBMS dependent Tactical Carries out Security Plans • Owns the DATA • High-level function • Policy & Procedure Planning • DBMS independent • Strategic • Maps out Security Plans Guide to Oracle 10g
Data Admin Matrix Data Security documentation tool. Crafted by DA, Carried out by DBA. Guide to Oracle 10g
Security Explained SystemPrivilege User Object Role
Specifying System Privileges • System privilege • Right to perform a specific action • DBA grants system privileges to users or roles • Use System Privileges page in Create User page • Object privilege • Associated permissions of an object • DBA or users grant to users or roles • Admin Option- gives user permissions to grant rights.
System Privileges Reference http://docs.oracle.com/cd/B28359_01/server.111/b28286/statements_9013.htm#sthref8513
System Privileges Example Shots of sample SQL statements for privileges Guide to Oracle 10g
Roles • Special database object • Represents collection of system privileges • Can be assign to multiple users • Create role • Can inherit privileges from other roles • Simpler than assigning system privileges to each user. Guide to Oracle 10g
Role Examples Shots of sample SQL statements for Roles Guide to Oracle 10g
TODO Guide to Oracle 10g
Database Backup and Recovery • Important database administration support tasks include: • Backup • Offline/cold • Online/hot • Recovery Guide to Oracle 10g
Creating Offline (Cold) Backups • Shut down database instance • Copy specific database files to alternate disk location • Parameter file • Control files • Datafiles • Not redo logs • Restart database instance
Creating Online (Hot) Backups • Create hot backup • Place database instance in ARCHIVELOG mode • Back up control file • Back up datafiles • Instruct database to write current contents of redo log files to archive files • Create backup copies of archive log files Guide to Oracle 10g
Database Recovery • Process of restoring database from either cold or hot backup files • Necessary after database failure • Cold backup recovery: • Shut down database • Restore backed up control file and datafiles to database server • Restart database
Database Recovery (continued) • Hot backup recovery: • Recover database to point at which last hot backup created • Use control trace file to generate new copy of control file • Restore backup copies of datafiles • Perform media recovery Guide to Oracle 10g
Backup Strategies • Cold backups • Simplest to perform • Satisfactory for databases whose: • Contents do not change very much • Users can tolerate downtime while DBA creates cold backup files • Hot backups • Complex to perform • Better suited for dynamic, mission-critical databases