8 Securing the Database

8.1 Default Setup

This section describes the default setup of the database.

8.1.1 DB Role AGILE_E_ROLE

The database role AGILE_E_ROLE is created once for the entire database. For every application, a database user will be created and the role AGILE_E_ROLE will be assigned to it.

The following privileges are assigned.

• Role - CONNECT

  This is a basic privilege from the database. For further information please refer to the Oracle Database documentation.

• System Privileges

  The following system privileges are assigned to AGILE_E_ROLE

  • CREATE TABLE

  • CREATE VIEW

  • CREATE SYNONYM

  • CREATE DATABASE LINK

  • CREATE SEQUENCE TO

  • GRANT ALTER SESSION

  • CREATE PROCEDURE

  • GRANT CREATE TRIGGER

  • GRANT READ,WRITE ON DIRECTORY ORA_DMP

• Quota Unlimited

  This privilege will be given to the database user for the following tablespaces.

  
  

  Note: The names for the tablespaces are default names and can be changed during the installation.

  
  

  • DEFAULT TABLESPACE "EDB"

    This are Agile e6 specific tablespaces.

    • Data tablepsace: QUOTA UNLIMITED ON "EDB"

    • Index tablespace: QUOTA UNLIMITED ON "EDB_IDX"

    • Index tablespace for temporary objects: QUOTA UNLIMITED ON "EDB_TMPIDX"

    • Tablespace for blob data: QUOTA UNLIMITED ON "EDB_LOB"

    • Tablespace for temporary objects: QUOTA UNLIMITED ON "EDB_TMP"

  • TEMPORARY TABLESPACE "TEMP"

    This is a database tablespace for sorting. It contains data from GLOBAL temporary tables

8.2 Advanced Setup

Additional modules are supported to setup a secure database. Agile e6 is certified for the following advanced security option.

Note: We recommend performing the setup of a secure database with the help of an Oracle security consultant.

• Transparent data encryption

  • For more information please refer to the Oracle Database 12c documentation, Securing Oracle Database, Advanced Security Guide - Using Transparent Data Encryption.

  • A guideline about how to move the database to a transparent data encryption can be found in the White Paper: Oracle Advanced Security TDE "OneCommand" for Oracle Agile e6.

• Database Vault

  • For more information please refer to the Oracle Database 12c documentation, Securing Oracle Database, Database Vault Administrator's Guide.

  • Example scripts can be found under DVB-for-Agile-e6.zip.

Note: Fur further information about these documents please refer to the Oracle Database Security documentation.