3 Replies Latest reply on Jun 28, 2013 4:28 AM by pilhuhn

RHQ's Oracle plugin : which user privileges needed ?

captain_mich Jun 19, 2013 11:04 AM

Hi,

I want to monitor an Oracle DB server but I don't want to use SYS or SYSTEM nor my JBoss datasource account.

So I created a new user, but I don't want to grant him ALL PRIVILEGES.

According to the Oracle rhq-plugin.xml, I granted SELECT ON DBA_USER and V_$SYSMETRIC (and CREATE SESSION ) to my user, but that wasn't enough.

Then, I found in the org.rhq.plugins.oracle.OracleUserComponent source that V_$SESSION is needed too.

Is it possible to create a role with only the SELECT ON needed, or have I to grant all DBA privileges ?

Thanks.

- RHQ 4.5.1

- Oracle 10g

Captain Mich.

1. Re: RHQ's Oracle plugin : which user privileges needed ?

genman Jun 24, 2013 2:33 PM (in response to captain_mich)

I use the Oracle plugin.

We have non-admin users (read-only users) that work fine to monitor the database. Unfortunately, I don't know all the grants you need. You can probably start out with as few privileges as possible and work up from there.
1 of 1 people found this helpful
Actions
2. Re: RHQ's Oracle plugin : which user privileges needed ?

captain_mich Jun 28, 2013 4:07 AM (in response to genman)

Yes, read-only users can be a good choice. Since RHQ is for testing environement but not for production.

That said, grant SELECT ANY DICTIONNARY seems ok...
1 of 1 people found this helpful
Actions
3. Re: RHQ's Oracle plugin : which user privileges needed ?

pilhuhn Jun 28, 2013 4:28 AM (in response to captain_mich)

Hey,
plugins can have in their plugin descriptor a "help" section which can then be shown in the plugin details screen.
Would you be able to craft such a help text describing what you have done?

Platform plugin and Generic JMX plugin have such a help section.
The hibernate one has it too, but there is a bug that prevents it being shown.

Thanks
Heiko
Actions

Go to original post