My suggestion is:
1) revoke all DBA privileges, only DBA team can have it;
2) Every developer can have his/her own schema, they can do whatever they like under their own schema;
3) Grant only select privs on other schemas for every schema owner, so they won't step onto each other;
4) For predeployment/Test/Staging databases, only grant DML privs to application users.
Note: You have to set up your team to take the responsiblity to do manitainance, replication, DDL support.
2007/06/14
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment