Oracle-L: RE: User_product_profile and sqlplusw

From: <Simon.Anderson_at_scisys.co.uk>
Date: Tue, 16 Apr 2002 02:18:20 -0800
Message-ID: <F001.00445115.20020416021820@fatcity.com>

I haven't tried it for a long time either, but I remember a couple of things that might help:

You can check the name of the program the users are connecting with using SELECT PROGRAM FROM V$SESSION; The 'security' is built into sqlplus, not into Oracle itself, so any curious user can circumvent it very easily.

It's only usefull if you trust all your users not to mess with their desktops - if you're serious about security, you might want to look at using password-protected roles to enable access. I have got it to work with sqlplusw.exe, but it was a long time ago.

Hope this helps.
Simon Anderson

Please respond to ORACLE-L_at_fatcity.com

To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc: (bcc: Simon Anderson/SSplc)

I haven't tried this for a while, but I think it's case sensitive. try 'sqlplusw.exe'

-----Original Message-----
Sent: Monday, April 15, 2002 4:13 PM
To: Multiple recipients of list ORACLE-L

Hi,

I have successfully restricted insert,update,delete using product_user_profile if the user users sqlplus at the command prompt. However I cannot
get it to work if they use sqlplusw.exe. Any ideas what entry I have to use to enforce this.

This is what I used to restrict product access with sqlplus.exe

This works for command prompt sqlplus
insert into
SYSTEM.PRODUCT_USER_PROFILE(PRODUCT,USERID,ATTRIBUTE,CHAR_VALUE) values ('SQLPlus','USER_ID','INSERT','DISABLED') ;

This does not work for windows sqlplus
insert into
SYSTEM.PRODUCT_USER_PROFILE(PRODUCT,USERID,ATTRIBUTE,CHAR_VALUE) values ('SQLPlusw','USER_ID','INSERT','DISABLED') ;

Thanks
Rick

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: Simon.Anderson_at_scisys.co.uk

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Tue Apr 16 2002 - 05:18:20 CDT