RE: Restricting access via sqlplus

From: Tierstein, Leslie <LTierstein_at_cns.gov>
Date: Wed, 09 Jul 2003 12:40:54 -0700
Message-ID: <F001.005C41B2.20030709122924@fatcity.com>

INSERT INTO system.sqlplus_product_profile (userid, attribute, char_value) VALUES (<oracle_user_name>, 'CONNECT', 'DISABLED') /

Works for us. Most people can't connect via SQL*Plus. I can connect to the production database under my own username, but not perform other DML such as updates, because there is an entry for me in the product profile for attribute = 'UPDATE'. When I type an UPDATE command the following happens:

PROD> update cn_people
SP2-0544: invalid command: update

Leslie

-----Original Message-----
Sent: Wednesday, July 09, 2003 3:30 PM
To: Multiple recipients of list ORACLE-L

Is there a way to prevent end users from connecting directly to the database via sqlplus without restricting access of those same users via application code. The application is a third party package which prompts for an id and password and then uses that id/password to connect to the database.

I found a note the the archives which suggested making an entry into the SQLPLUS_PRODUCT_PROFILE table, but I have not been able to make this work.

Oracle version: 8.1.7
AIX 4.3.3 Thanks,
Peter Schauss
--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Schauss, Peter
INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Tierstein, Leslie
INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------