Skip to main content

Posts

Showing posts with the label 23ai features

PDB - Hybrid read only mode

  Hybrid Read-Only Mode , introduced in Oracle Database 23ai, solves the classic "Catch-22" where you need to perform maintenance (requiring Read-Write access) but want to prevent application users from changing data (requiring Read-Only access). For years, DBAs have faced a frustrating trade-off during maintenance windows. If you open a Pluggable Database (PDB) in READ WRITE mode, your application users (and their potentially messy DML) can interfere with your patching or schema upgrades. If you open it in READ ONLY mode, you can’t perform the very maintenance you planned. What is Hybrid Read-Only Mode? In this mode, the PDB's accessibility is determined by the user type : Common Users (CDB Level): Experience the PDB in READ WRITE mode. They can perform DDL, DML, and maintenance tasks. Local Users (PDB Level): Experience the PDB in READ ONLY mode. Even if they have the DBA role, they are restricted from making any changes. Implementing and Testing Hybrid Read-Only...

Mastering the Art of Least Privilege: Oracle Privilege Analysis in 23ai

 In the fast-paced world of database administration and development, the pressure to get things done often collides with the need for security. How many times have you, as a DBA, succumbed to the temptation of granting SELECT ANY TABLE or DBA privileges to a developer just to bypass a perplexing ORA-00942: table or view does not exist error? We’ve all been there. It’s the "Get it Working Now, Fix it Later" approach. The problem is, "later" rarely comes, and your database becomes a Swiss cheese of excessive permissions. This is the anti-pattern of the Principle of Least Privilege (PoLP) , which dictates that a user should only have the privileges necessary to perform their specific job - no more, no less. Over-privileged users are a massive security risk, turning a single compromised account into a database-wide breach. Oracle Database 23ai changes the game. With its focus on "Security by Design," 23ai introduces features that make implementing least pri...