Posts

Showing posts with the label 23ai

Oracle 23ai & 26ai: Structural Changes Every DBA Needs to Know

Image
  The evolution from Oracle 19c to the latest 23ai and 26ai releases isn’t just about new AI features; it’s a fundamental shift in how the database is structured and managed. For DBAs, this means unlearning some old habits and embracing a more automated, secure, and streamlined architecture. Here is a breakdown of the most impactful structural changes you’ll encounter. Data Dictionary & Ownership: Strengthening the Core Oracle is tightening the reins on internal object management to boost security and performance. LogMiner Move: In a move toward better kernel control, LogMiner objects have migrated from the SYSTEM schema to SYS. This reduces the risk of accidental modification and aligns with "least privilege" principles. Component Cleanup: During the upgrade process, Oracle now standardizes Spatial components under the MDSYS schema. Notably, older, legacy multimedia components are being stripped out to reduce the database footprint. JSON Duality: For those...

Mastering the Art of Least Privilege: Oracle Privilege Analysis in 23ai

 In the fast-paced world of database administration and development, the pressure to get things done often collides with the need for security. How many times have you, as a DBA, succumbed to the temptation of granting SELECT ANY TABLE or DBA privileges to a developer just to bypass a perplexing ORA-00942: table or view does not exist error? We’ve all been there. It’s the "Get it Working Now, Fix it Later" approach. The problem is, "later" rarely comes, and your database becomes a Swiss cheese of excessive permissions. This is the anti-pattern of the Principle of Least Privilege (PoLP) , which dictates that a user should only have the privileges necessary to perform their specific job - no more, no less. Over-privileged users are a massive security risk, turning a single compromised account into a database-wide breach. Oracle Database 23ai changes the game. With its focus on "Security by Design," 23ai introduces features that make implementing least pri...