Re: How to allow updates by programs by not by sqlplus.

[This followup was posted to comp.databases.oracle.misc and a copy was sent to the cited author.]

In article <338C5F89.6614_at_interpath.com>, kdenny_at_interpath.com says...
> Kenneth Denny wrote:
> >
> > Hello,
> > I need to implement a way to allow users to run sqlplus for query
> > purposes, but not allow them to update. At the same time I want them to
> > be able to run application programs which update the database.
> >
> > I'm sure there is a way this can be done. Can someone tell me how?
> > Please reply by email.
> >
> > Thanks
> > Ken Denny
> > email: kdenny_at_interpath.com
>
> BTW, don't use the email address in the header of my previous message as
> I can't receive external email at that address. Use the interpath
> address in this message.
>
> Thanks
> Ken Denny
> email: kdenny_at_interpath.com
>

Another thing to keep in mind is the use of packages. Users other than the owner of a package can run a package that updates tables without having any permission on the tables as long as they have execute privilege on the package.

Frances Edelstein
Author of "Learning Oracle Database Programming" fran_at_rbsbooks.com
Please visit our website for information on our Oracle tutorials and for links to other Oracle related sites: http://www.rbsbooks.com Received on Mon Jun 02 1997 - 00:00:00 CDT