Stephen,
The "revealing" of the APPS password on the command line in SQL
was fixed by
patch 1196850 for 11.5 and back-ported to 11.0 and 10.7
See Note 201567.1 on MetaLink
Hemant
At 10:43 AM 17-10-03 -0800, you wrote:
April:
Wanted to chime
in on this one but didn t have time. The APPS password is generally
secure within the DBA group, HOWEVER, it can be seen by almost everyone
that has access to UNIX or Concurrent Manager. Unfortunately,
this portion of apps was not well protected.
Oracle was
working on a solution to this but it appears it will not be fixed until
12i or later.
Thank You
Stephen P. Karniotis
Technical Alliance Manager
Compuware Corporation
Direct:
(313) 227-4350
Mobile:
(248) 408-2918
Email:
Stephen.Karniotis@Compuware.com
Web:
www.compuware.com
-----Original Message-----
From: April Wells [mailto:AWells@csedge.com]
Sent: Wednesday, October 15, 2003 8:40 AM
To: Multiple recipients of list ORACLE-L
Subject: Financials and APPS password
Okay, anyone using Financials... E-Business suite... Oracle 11i... whatever you want to call it...
I am trying to apply SOME kind of security to my databases. It appears that it is critical for everyone to be able to access production using the APPS id.... Finance and accounting people, developers, everyone. What does everyone else do in their setups? The newest reason is the need to run the new Mass Additions Trace which apparently requires that you use the apps id. We have found a way to set up any user with a read only version of what APPS has (since they have to be able to compile reports in production and access production data live rather than a month old clone), but Oracle says that you need to run Mass Additions Trace as apps.
Does anyone let the entire company have the production apps user's password?
April Wells
Oracle DBA/Oracle Apps DBA
Corporate Systems
Amarillo Texas
/\
/ \
/ \
\ /
\/
>\<
\
>\<
\
Few people really enjoy the simple pleasure of flying a kite
Adam Wells age 11
The information contained in this communication, including attachments, is strictly
confidential and for the intended use of the addressee only; it may also contain
proprietary, price sensitive, or legally privileged information. Notice is hereby given that
any disclosure, distribution, dissemination, use, or copying of the information by anyone
other than the intended recipient is strictly prohibited and may be illegal. If you have
received this communication in error, please notify the sender immediately by reply e-mail,
delete this communication, and destroy all copies.
Corporate Systems, Inc. has taken reasonable precautions to ensure that any attachment to
this e-mail has been swept for viruses. We specifically disclaim all liability and will
accept no responsibility for any damage sustained as a result of software viruses and advise
you to carry out your own virus checks before opening any attachment.
The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it.
Hemant K Chitale
Oracle 9i Database Administrator Certified Professional
My personal web site is :
http://hkchital.tripod.com
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Hemant K Chitale
INET: hkchital@singnet.com.sg
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Sat Oct 18 2003 - 02:44:25 CDT
