Re: Forms user session restrictions

From: Martijn Bos <maboc_at_maboc.nl>
Date: Thu, 1 Dec 2011 09:09:34 +0100
Message-ID: <20111201080933.GA15307_at_app01.bos>



Hi all,

On Tue, Nov 29, 2011 at 08:52:44PM +0100, Toon Koppelaars wrote:
> It could be a database issue...

I'm not sure it is. Don't all connections come from the same machine (the wls/forms server)? I doubt whether forms supplies the whereabouts of the user to the database. On the other hand....I do not have much experience with forms, so I could easily be way off.

Best Regards,
Martijn Bos

> Using a login-trigger you could check that the count(distinct machine), or
> count(distinct terminal) for the user that is logging in is equal to 1. And
> if not raise an application error thus preventing the login.
>
> On Tue, Nov 29, 2011 at 6:29 PM, Ivan Ricardo Schuster
> <ivanrs79_at_gmail.com>wrote:
>
> > Listers,
> > This is not really a database issue, but a Forms/Reports question, but I
> > believe someone here can help me.
> >
> > I have been asked from the security guys to avoid users from sharing their
> > Forms accounts with their coallegues, then I thought the best way to
> > achieve this is to block simultaneous connections from diferent machines
> > (IPs).
> >
> > Is there any way to implement this restriction in formsweb.cfg or another
> > place in Weblogic 11g?
> >
> > By the way, I am using database authentication.
> >
> > Waiting for your suggestions.
> >
> > Thanks in advance
> >
> > --
> > Ivan Ricardo Schuster
> > OCP 10g/11g
> > OCE RAC 10g/Linux
> >
> >
> > --
> > http://www.freelists.org/webpage/oracle-l
> >
> >
> >
>
>
> --
> Toon Koppelaars
> RuleGen BV
> Toon.Koppelaars_at_RuleGen.com
> www.RuleGen.com
> TheHelsinkiDeclaration.blogspot.com
>
> (co)Author: "Applied Mathematics for Database Professionals"
> www.rulegen.com/am4dp-backcover-text
>
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>

--
http://www.freelists.org/webpage/oracle-l
Received on Thu Dec 01 2011 - 02:09:34 CST

Original text of this message