Advanced Databases DBA: Security and Backups Guide to Oracle 10g 1

Advanced Databases Agenda Understand the need for security. Learn about System Permissions and Object permissions. Understand the purpose of Roles. Explore Security-focused SQL. Explain backup and restore options. 2

Advanced Databases Data Admin –vs- DB Admin Data Administration Owns the DATA High-level function Policy & Procedure Planning DBMS independent Strategic Maps out Security Plans Database Administration Owns the Database Technical function Policy &Procedure Enforcement DBMS dependent Tactical Carries out Security Plans Guide to Oracle 10g 3

Advanced Databases Data Admin Matrix Data Security documentation tool. Crafted by DA, Carried out by DBA. Guide to Oracle 10g 4 RoleObject(s)Permission s Order Entry Orders Order Items Insert, Read Credit Approval CustomersUpdate

Advanced Databases Security Explained 5 User System Privilege Role Object

Advanced Databases Specifying System Privileges System privilege –Right to perform a specific action –DBA grants system privileges to users or roles –Use System Privileges page in Create User page Object privilege –Associated permissions of an object –DBA or users grant to users or roles Admin Option- gives user permissions to grant rights. 6

Advanced Databases System Privileges Reference _01/server.111/b28286/statements _9013.htm#sthref8513 7

Advanced Databases System Privileges Example Shots of sample SQL statements for privileges Guide to Oracle 10g 8

Advanced Databases Roles Special database object Represents collection of system privileges Can be assign to multiple users Create role –Can inherit privileges from other roles Simpler than assigning system privileges to each user. Guide to Oracle 10g 9

Advanced Databases Role Examples Shots of sample SQL statements for Roles Guide to Oracle 10g 10

Advanced Databases Guide to Oracle 10g 11

Advanced Databases TODO Guide to Oracle 10g 12

Advanced Databases Database Backup and Recovery Important database administration support tasks include: –Backup Offline/cold Online/hot –Recovery Guide to Oracle 10g 13

Advanced Databases Creating Offline (Cold) Backups Shut down database instance Copy specific database files to alternate disk location –Parameter file –Control files –Datafiles –Not redo logs Restart database instance 14

Advanced Databases Creating Online (Hot) Backups Create hot backup –Place database instance in ARCHIVELOG mode –Back up control file –Back up datafiles –Instruct database to write current contents of redo log files to archive files Create backup copies of archive log files Guide to Oracle 10g 15

Advanced Databases Database Recovery Process of restoring database from either cold or hot backup files Necessary after database failure Cold backup recovery: –Shut down database –Restore backed up control file and datafiles to database server –Restart database 16

Advanced Databases Database Recovery (continued) Hot backup recovery: –Recover database to point at which last hot backup created –Use control trace file to generate new copy of control file –Restore backup copies of datafiles –Perform media recovery Guide to Oracle 10g 17

Advanced Databases Backup Strategies Cold backups –Simplest to perform –Satisfactory for databases whose: Contents do not change very much Users can tolerate downtime while DBA creates cold backup files Hot backups –Complex to perform –Better suited for dynamic, mission-critical databases 18

Advanced Databases Questions 19