Re: Preventing SQLPLUS access?

From: Atul Ashar <aashar_at_usccmail.bms.com>
Date: 1997/07/09
Message-ID: <33C3CE74.3B54@usccmail.bms.com>#1/1

Hi Aram,

I have had a similar situation. You are right about all non-oracle tools do not check User Product Profile.

However, in your suggestion, user can start a session the way you are suggesting and then when you grant that role to the user, role is granted not just for the session. So, user can still connect to database using MS-Query with a different session before they disconnect from the session which granted them the role.

How do you take care of that?

Aram Meguerian wrote:
>
> The way we are trying to solve it is to issue to every user a
> account with on create session and execute on a security package.
> On connection time the application run some procedures and functions
> of the package at the rigth order and a role (with password) is set
> to the user. (default procedure everywhere I look)
>
> Hope it helps,
Received on Wed Jul 09 1997 - 00:00:00 CDT