Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.
-
Upload
brent-nash -
Category
Documents
-
view
213 -
download
1
Transcript of Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.
![Page 1: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/1.jpg)
Advanced Databases
Guide to Oracle 10g
1
DBA: Security and Backups
![Page 2: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/2.jpg)
Advanced Databases 2
Agenda
• Understand the need for security.• Learn about System Permissions
and Object permissions.• Understand the purpose of Roles.• Explore Security-focused SQL.• Explain backup and restore options.
![Page 3: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/3.jpg)
Advanced Databases
Guide to Oracle 10g
3
Data Admin –vs- DB Admin
Data Administration
• Owns the DATA• High-level function• Policy & Procedure
Planning• DBMS independent• Strategic• Maps out Security
Plans
Database Administration
• Owns the Database• Technical function• Policy &Procedure
Enforcement• DBMS dependent• Tactical• Carries out Security
Plans
![Page 4: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/4.jpg)
Advanced Databases
Guide to Oracle 10g
4
Data Admin Matrix
• Data Security documentation tool.• Crafted by DA, Carried out by DBA.
Role Object(s) Permissions
OrderEntry
OrdersOrder Items
Insert, Read
Credit Approval
Customers Update
![Page 5: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/5.jpg)
Advanced Databases 5
Security Explained
UserSystemPrivilege
RoleObject
![Page 6: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/6.jpg)
Advanced Databases 6
Specifying System Privileges
• System privilege– Right to perform a specific action– DBA grants system privileges to users or roles– Use System Privileges page in Create User
page
• Object privilege– Associated permissions of an object– DBA or users grant to users or roles
• Admin Option- gives user permissions to grant rights.
![Page 7: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/7.jpg)
Advanced Databases 7
System Privileges Reference
http://docs.oracle.com/cd/B28359_01/server.111/b28286/statements_9013.htm#sthref8513
![Page 8: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/8.jpg)
Advanced Databases
Guide to Oracle 10g
8
System Privileges Example
• Shots of sample SQL statements for privileges
![Page 9: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/9.jpg)
Advanced Databases
Guide to Oracle 10g
9
Roles
• Special database object • Represents collection of system
privileges • Can be assign to multiple users• Create role– Can inherit privileges from other roles
• Simpler than assigning system privileges to each user.
![Page 10: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/10.jpg)
Advanced Databases
Guide to Oracle 10g
10
Role Examples
• Shots of sample SQL statements for Roles
![Page 11: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/11.jpg)
Advanced Databases
Guide to Oracle 10g
11
![Page 12: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/12.jpg)
Advanced Databases
Guide to Oracle 10g
12
TODO
![Page 13: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/13.jpg)
Advanced Databases
Guide to Oracle 10g
13
Database Backup and Recovery
• Important database administration support tasks include:– Backup• Offline/cold• Online/hot
– Recovery
![Page 14: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/14.jpg)
Advanced Databases 14
Creating Offline (Cold) Backups
• Shut down database instance• Copy specific database files to
alternate disk location– Parameter file– Control files– Datafiles– Not redo logs
• Restart database instance
![Page 15: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/15.jpg)
Advanced Databases
Guide to Oracle 10g
15
Creating Online (Hot) Backups
• Create hot backup– Place database instance in ARCHIVELOG
mode– Back up control file– Back up datafiles– Instruct database to write current
contents of redo log files to archive files• Create backup copies of archive log files
![Page 16: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/16.jpg)
Advanced Databases 16
Database Recovery
• Process of restoring database from either cold or hot backup files
• Necessary after database failure• Cold backup recovery:– Shut down database– Restore backed up control file and
datafiles to database server– Restart database
![Page 17: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/17.jpg)
Advanced Databases
Guide to Oracle 10g
17
Database Recovery (continued)
• Hot backup recovery:– Recover database to point at which last
hot backup created– Use control trace file to generate new
copy of control file– Restore backup copies of datafiles– Perform media recovery
![Page 18: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/18.jpg)
Advanced Databases 18
Backup Strategies
• Cold backups– Simplest to perform– Satisfactory for databases whose:
• Contents do not change very much • Users can tolerate downtime while DBA creates
cold backup files
• Hot backups – Complex to perform– Better suited for dynamic, mission-critical
databases
![Page 19: Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1.](https://reader038.fdocuments.in/reader038/viewer/2022110321/56649f3f5503460f94c602a6/html5/thumbnails/19.jpg)
Advanced Databases 19
Questions