Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: revoking "ALTER SESSION"

RE: revoking "ALTER SESSION"

From: Hemant K Chitale <hkchital_at_singnet.com.sg>
Date: Wed, 09 Apr 2003 08:08:51 -0800
Message-ID: <F001.0057DF8E.20030409080851@fatcity.com>



Raj,

I thought you were being humourous here.  Then I saw your other
email about it being possible to revoke ALTER SESSION and there
being a Note on MetaLink !
I did find the Note.  It is Note #204699.1 and provides an
example by way of using the PRODUCT_USER_PROFILE table.

The note does say that although ALTER SESSION is implicit with
CREATE SESSION,  an "ALTER SESSION SET SQL_TRACE=.."
requires an explicit ALTER SESSION privilege.  How nice !

Hemant

At 11:44 AM 08-04-03 -0800, you wrote:

revoke alter session from users ...

Raj
--------------------------------------------------------------------------------
Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !

-----Original Message-----
From: Boris Dali [mailto:boris_dali@yahoo.ca]
Sent: Tuesday, April 08, 2003 3:09 PM
To: Multiple recipients of list ORACLE-L
Subject: Re: 65 Oracle security papers, articles and presentations

Pete,

Thanks, the collection is very useful.

Does the trick of dumping the library cache, level 10
and hunting for open text passwords still work in 9i?
I thought they fixed it, so it would look like the
following:

...
BUCKET 114176:
  LIBRARY OBJECT HANDLE: handle=6f4bcf88
  name=alter user dummy identified by ***********
  hash=e7b3be00 timestamp=04-08-2003 13:48:11
...

Any "cure" for this?

Thanks,
Boris Dali

Hemant K Chitale
My personal web site is :  http://hkchital.tripod.com

-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Hemant K Chitale INET: hkchital@singnet.com.sg Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Wed Apr 09 2003 - 11:08:51 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US