Running impdp with dba is convinient, but can be risky. create a dedicated user for specific impdp tasks would be more secure. About DATA_PUMP_DIR it