Oracle-L: RE: Disable certain users from login to database while applying Human

From: Stephane Faroult <sfaroult_at_oriolecorp.com>
Date: Mon, 18 Feb 2002 00:18:51 -0800
Message-ID: <F001.004120C2.20020218001851@fatcity.com>

('binary' encoding is not supported, stored as-is)
>----- Original Message -----
>From: "CHAN Chor Ling Catherine (CSC)"
><clchan_at_nie.edu.sg>
>To: Multiple recipients of list ORACLE-L
><ORACLE-L_at_fatcity.com>
>Sent: Sun, 17 Feb 2002 23:28:24
>
>Hi Gurus,
>
>I need to disable certain users from login to
>database while I apply the
>Human Resources Patches for our Oracle HR 11i
>Applications.
>Which is the best way to do it ? Should I write
>on-logon trigger to disable
>or should I take away their privileges to logon to
>report/forms/sqlplus ?
>What about the rest of the DBA Applications
>administrator ? What do U guys
>do to solve the dead-lock problem (If my users
>access the HR tables while I
>apply the patches, I will encounter dead-lock
>problem) ?
>
>Please advise. Thanks.
>
>Regds,
>New Bee
>--
>Please see the official ORACLE-L FAQ:
>http://www.orafaq.com
>--
>Author: CHAN Chor Ling Catherine (CSC)
> INET: clchan_at_nie.edu.sg
>

Catherine,

The simplest thing to do for maintenance operation is to shut the database down and to restart it in RESTRICT mode, which only allows people who have been granted the CONNECT RESTRICT privilege (in practice, accounts which have the DBA role) to connect. Shutting down the listener is also a solution, if you have to work on the server and all users are connected through SQL*Net, but beware that it will not terminate existing sessions. If you need to target *some* but not all users, you can revoke CREATE SESSION from them.

Stephane Faroult
Oriole Corporation
Performance Tools & Free Scripts

http://www.oriole.com, designed by Oracle DBAs for Oracle DBAs

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Stephane Faroul
  INET: sfaroult_at_oriolecorp.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Mon Feb 18 2002 - 02:18:51 CST