Question & Answer
Question
Based on the Technote: http://www-01.ibm.com/support/docview.wss?uid=swg21647811 there is information that privileges can be revoked from the Oracle-CDC user, however it is not finally clear if also the unlimited tablespace priviledge can be revoked.
Cause
The "unlimited tablespace" privilege is often causing audit concerns because it allows the creation of tables also in SYSTEM, SYSAUX and AUDIT tablespaces.
Answer
For target side CDC Agent, the CDC database user just need quota on tablespaces where the inscope table reside.
After instance creation and setting appropriate quota ( limited or unlimited) on tablespace, revoking "unlimited tablespace" is technically feasible.
Please note that the unlimited table-space privilege is intended mainly for the target side to avoid CDC to fail once a pre-defined quota is reached or exeeded which can easily happen for example on batched insert transactions that are applied to the target side database.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg22013622