Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Disconnecting session from an on logon trigger

RE: Disconnecting session from an on logon trigger

From: <Jay.Miller_at_tdameritrade.com>
Date: Tue, 16 Oct 2007 11:20:11 -0400
Message-ID: <304CF4722010DD4FA19829D09DDB956BAC33BE@prdhswsemlmb01.prod-am.ameritrade.com>


Hmm, this is a problem. If possible I'd also like to prevent SYSTEM from connecting if it comes from that particular module. I suppose I could revoke administer database trigger from the DBA role.

Anyone have opinions on the ramifications of doing so?

Jay Miller
Sr. Oracle DBA
201.369.8355

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Ted Coyle Sent: Tuesday, October 16, 2007 9:22 AM
To: alberto.dellera_at_gmail.com; oracle-l_at_freelists.org Subject: RE: Disconnecting session from an on logon trigger

The exception method is great, but only if the user does not have ADMINISTER DATABASE TRIGGER granted somewhere like IMPORT FULL DATABASE.

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]
On Behalf Of Alberto Dell'Era
Sent: Monday, October 15, 2007 3:59 PM
To: oracle-l_at_freelists.org
Subject: Re: Disconnecting session from an on logon trigger

> I'd like to create an on logon trigger that will prevent the user from

> connecting in certain circumstances. I have one way of doing it which
would
> be to issue
> execute immediate ' alter system kill session 'session_id', 'serial#''

Just raise an exception from the logon trigger   raise_application_error (-20001, 'logon denied because ...'); so your bad user will also have a nice error which clearly states the reason why the logon was denied - which is very nice.

--
Alberto Dell'Era
"the more you know, the faster you go"
--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l
Received on Tue Oct 16 2007 - 10:20:11 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US