RE: Prevent certain users logging on during specific hours

From: Cunningham, Mike <mcunningham_at_thedoctors.com>
Date: Thu, 24 Apr 2014 09:05:32 -0700
Message-ID: <C8FDF1081BF81B418F937FE98B7B3CC78D9C01_at_NPEXCHMB102.tdc.internal>



John, we use a process as mentioned before – shutting down a listener. We have more than one listener and we shutdown the *general* listener during certain periods and disconnect the users who should not be connected at that time. This is sufficient for our needs. However, a savvy person could figure out other available listeners and connect. Depending on the level of security required this may or may not meet your needs.

Michael Cunningham
Senior Database Administrator
The Doctors' Company
707.226.0221 - desk
707.337.0184 - cell

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of John Hallas Sent: Thursday, April 24, 2014 3:47 AM
To: 'Ethan Post'
Cc: oracle-l_at_freelists.org
Subject: RE: Prevent certain users logging on during specific hours

It is around a security restriction and I cannot be more specific than that. It is a precautionary measure as users could do what they need during legitimately allowed access periods No matter how good your monitoring and alerting is there is always a delay whereas if you stop access first you don’t need to monitor and alert (for that specific issue of course)

John

From: Ethan Post [mailto:post.ethan_at_gmail.com] Sent: 24 April 2014 08:29
To: John Hallas
Cc: oracle-l_at_freelists.org<mailto:oracle-l_at_freelists.org> Subject: Re: Prevent certain users logging on during specific hours

John,
Sorry to be a pain, but instead of answering your question can I ask one instead? Who are these users? Are they really a problem and if so what is the problem you have identified? My preference is always to give everyone as much hassle free access to my databases as possible. I have plenty of monitoring and alerting in place for the trouble makers. Just wondering, perhaps there is a better solution than locking out users here.

Thanks,
Ethan

On Wed, Apr 23, 2014 at 1:42 AM, John Hallas <John.Hallas_at_morrisonsplc.co.uk<mailto:John.Hallas_at_morrisonsplc.co.uk>> wrote: We have a requirement to prevent database logons by specific users (who can be identified because they have a particular role) during certain times and I am thinking of options and looking for any other thoughts on the best approach. These are some of my thoughts



Wm Morrison Supermarkets Plc is registered in England with number 358949. The registered office of the company is situated at Gain Lane, Bradford, West Yorkshire BD3 7DL. This email and any attachments are intended for the addressee(s) only and may be confidential.

If you are not the intended recipient, please inform the sender by replying to the email that you have received in error and then destroy the email. If you are not the intended recipient, you must not use, disclose, copy or rely on the email or its attachments in any way.

This email does not constitute a contract in writing for the purposes of the Law of Property (Miscellaneous Provisions) Act 1989.

Our Standard Terms and Conditions of Purchase, as may be amended from time to time, apply to any contract that we enter into. The current version of our Standard Terms and Conditions of Purchase is available at: http://www.morrisons.co.uk/gscop

Although we have taken steps to ensure the email and its attachments are virus-free, we cannot guarantee this or accept any responsibility, and it is the responsibility of recipients to carry out their own virus checks.


Confidentiality Notice: This message and any attachments hereto may contain confidential and privileged communications or information and/or attorney client communications or work-product protected by law. The information contained herein is transmitted for the sole use of the intended recipient(s). If you are not the intended recipient or designated agent of the recipient of such information, you are hereby notified that any use, dissemination, copying or retention of this e-mail or the information contained herein is strictly prohibited and may subject you to penalties under federal and/or state law. If you received this e-mail in error, please notify the sender immediately and permanently delete this e-mail.

--
http://www.freelists.org/webpage/oracle-l
Received on Thu Apr 24 2014 - 18:05:32 CEST

Original text of this message