Re: How to use Product_User_Profile table?

On Fri, 25 Sep 1998 19:42:45 GMT,
skubiszewski_at_Eisner.DECUS.Org wrote:

>I'm sketchy on how to use the table but it appears that
>what I'd like to do is impossible, that you must restrict
>by logon name (which is alot of work - I have 1300 users.)

You can wildcard the username. Use the same wildcards that work with LIKE. So to restrict ALL users from using the set command, do the following:

insert into product_user_profile (product,userid,attribute, char_value)
values ('SQL*Plus','%','SET','DISABLED');

>If I have to resort to inserting restrictions by username,
>am I correct in that I must have two entries per user?
>One to disable SET, the other to disable the ROLE CR_USER?

Yes. That is correct. Be careful when disabling roles using a wildcarded user name. SQL*Plus issues just _one_ command to disable whatever roles you have restricted. If any one of those roles does not apply to a particular user, then that command will fail, and none of the roles will be disabled. Bottom line, if you restrict userid '%' from the CR_USER roles, you better be sure that _all_ users have that role to begin with.

regards,

Jonathan Received on Sat Sep 26 1998 - 13:46:00 CDT