6.8. Summary

Oracle 10g gives you a well-stocked toolkit for managing your users and securing your database. You create and manage user accounts with the CREATE, ALTER, and DROP USER statements. You can assign tablespace resources to be used for sorting that are different than those for tables or indexes. You can limit the disk, CPU, and memory resources that your users consume by employing tablespace quotas and kernel resource limits in user profiles.

To protect your data from unwanted access or manipulation, you can employee object and system privileges. You can create and use roles to make managing these database privileges easier. You can enable object, statement, privilege and fine-grained auditing to help you monitor and record sensitive database activity.

Your Oracle 10g database has several powerful features (user accounts and packages) that will need to be locked down in your production systems, and in this chapter you learned which user accounts need to be locked, as well as which standard packages should be locked down to better protect your company's data.