topic schema exposed in ArcEditor in Data Management Questions

schema exposed in ArcEditor

KåreRasmussen — Fri, 18 Nov 2011 06:43:10 GMT

Hi everyone.

I´ve recently installed SDE on an Oracle 10g databaseserver. If I use "sql developer" or Oracles client software the only thing I can access is the SDE tables/schema (I´m not all clear on the Oracle terms). But when I access the databaseserver thru ArcEditor (still using the SDE credentials) suddenly I can se every single table/schema available on the server. How do I avoid that, since some tables migth contain sensitive information.

Any suggestions/comments is greatly appreciated
/Kaare

Re: schema exposed in ArcEditor

VinceAngelo — Fri, 18 Nov 2011 12:44:53 GMT

You should not ever use the SDE user to own or manage spatial tables. Best practice is to
reserve SDE for ST_GEOMETRY and SDE schema mangement, using one or more "data
ownership" accounts to own and access spatial data. While the SDE user needs extraordinary
privileges at install and upgrade, it barely needs more than CONNECT at most times; granting
SELECT ANY TABLE to the SDE user is generally unwise, and not recommended.

- V

Re: schema exposed in ArcEditor

KåreRasmussen — Fri, 18 Nov 2011 18:44:57 GMT

Hi Vince and thanks for the reply.

Is there any guid to how I create a new user and grant the right priviliges so the user can create a geodatabase. This might be it:
http://help.arcgis.com/en/geodatabase/10.0/install_guides/arcsde_for_oracle_installation_and_upgrade_guide/index.html#/Creating_a_geodatabase_in_a_user_s_schema_in_Oracle/009400000010000000/

but I´m not sure.

TIA
/Kaare

Re: schema exposed in ArcEditor

VinceAngelo — Fri, 18 Nov 2011 22:41:32 GMT

The RDBMS vendors generally do a better job of telling folks how to administer their software,
but the ArcSDE documentation does detail the necessary permissions (the page that you cited
does not pertain to this, however).

ArcGIS 10.1 has a capability to create users, but after 23 years as a professional DBA, I wouldn't
ever need to use it.

- V