...
The two alternatives below assume this initial setup, prior to performing the isolation steps:
- Db user/schema UACHIEVE owns all UACHIEVE tables.
- The uAchieve server connects to the database as the UACHIEVE database user.
- Db user/schema TFO_CONNECTOR has access (select, insert, update and delete privileges and private synonyms ) to on/for the UACHIEVE schema JOB_QUEUE_xxx tables as indicated above.
- The Transferology Connector connects to the database as the TFO_CONNECTOR database user.
...
- Db user/schema UACHIEVE owns all UACHIEVE tables.
- Db user/schema TFO_UACH_SRVR will be used by the new uAchieve server.
- Db user/schema TFO_CONNECTOR will be used by the Connector.
It is accomplished with the following tasks:
- Create JOB_QUEUE_xxx, CURRENT_JOBS and STU_ACADREC tables, in the TFO_UACH_SRVR schema/user.
- From the UACHIEVE schema/owner grant select privilege on the tables, except STU_ACADREC listed in the Other Tables section to the TFO_UACH_SRVR schema/user.Grant
- From the UACHIEVE schema/owner revoke select, insert, update , and delete privileges on the newly created JOB_QUEUE_xxx tables to the TFO_CONNECTOR schema/user.
- Make sure the database user for the uAchieve daemon has
- as well as select privilege on the tables listed above but not STU_ACADRECfrom the TFO_CONNECTOR schema/user.
- In the TFO_UACH_SRVR schema/user create private synonyms to the UACHIEVE schema/owner tables, except STU_ACADREC listed in Other Tables section.
- Install the uAchieve server into a different directory, edit the config files, creating the new uAchieve daemon.
- Specify the TFO_UACH_SRVR schema/user as the database user for the uAchieve server.
- In the TFO_UACH_SRVR schema/user grant select, insert, update, and delete privileges on the newly created JOB_QUEUE_xxx tables to the TFO_CONNECTOR schema/user.
- In the TFO_CONNECTOR schema/user create private synonyms to the TFO_UACH_SRVR schema/owner JOB_QUEUE_xxx tables.
Isolation via 2 Database Users
...
- Create JOB_QUEUE_xxx, CURRENT_JOBS and STU_ACADREC tables, in the TFO_CONNECTOR schema/user.
- Grant From the UACHIEVE schema/owner grant select privilege on the tables listed above but not STU_ACADRECin the above Other Tables section to the TFO_CONNECTOR schema/user.
- In the TFO_CONNECTOR schema/user create private synonyms to the UACHIEVE schema/owner tables listed in Other Tables section.
- Install the uAchieve server into a different directory, edit create daemonthe config files, creating the new uAchieve daemon.
- Specify the TFO_CONNECTOR schema/user as the database user for the uAchieve server.