| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Restricting access via sqlplus
Tanel,
If I change TOAD.EXE to TODD.EXE, this scheme fails instantly ...
Raj
-----Original Message-----
From: Tanel Poder [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 09, 2003 4:24 PM
To: Multiple recipients of list ORACLE-L
Subject: Re: Restricting access via sqlplus
Hi!
I think sqlplus product profile isn't a good idea, because some smarter ones
might be using TOAD, SQL Navigator or SQL Worksheet... What you might want
to do is to write an after logon trigger which checks the app name from
v$session and allows logon if and only if app name (v$session.program) is
your 3rd party one. If app name isn't correct, then your trigger raises an
exception.
But of course, it only protects you from dumb users.
Another way would be playing with roles, but since you have 3rd party app, it might be problematic.
Tanel.
> Is there a way to prevent end users from connecting directly
> to the database via sqlplus without restricting access of those
> same users via application code. The application is a third party
> package which prompts for an id and password and then uses that
> id/password to connect to the database.
>
> I found a note the the archives which suggested making an entry into
> the SQLPLUS_PRODUCT_PROFILE table, but I have not been able to make
> this work.
>
> Oracle version: 8.1.7
> AIX 4.3.3
>
> Thanks,
> Peter Schauss
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Schauss, Peter
> INET: [EMAIL PROTECTED]
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). *********************************************************************This e-mail message is confidential, intended only for the named recipient(s) above and may contain information that is privileged, attorney work product or exempt from disclosure under applicable law. If you have received this message in error, or are not the named recipient(s), please immediately notify corporate MIS at (860) 766-2000 and delete this e-mail message from your computer, Thank you.*********************************************************************1Received on Wed Jul 09 2003 - 14:46:09 CDT
 |
 |