keeping odbc-users out?

From: Juergen Gmeiner <gj_at_moc.nospam.inait>
Date: Tue, 29 Sep 1998 12:43:17 +0200
Message-ID: <3610B9C4.66B65E5F@moc.nospam.inait>

hi there,

some of our customers are apparently starting to access our database (oracle wgs 7.3.2) via odbc.

this is a medical application (archival of medical images) and somehow this makes me very nervous, imagining some crazy luser starting to delete stuff in ms-acce*s or something ...

is there a way to restrict odbc-access to a read-only user?

only solution i've come up with so far is to use "identified externally" for
our application user and ensuring REMOTE_OS_AUTHENT is set to false. "read-only" users would be created with "identified by SOMEPASSWD",
so the customers would be forced to use those via odbc.

only drawback is that we are currently developping a java-based intranet client
who depends on sqlnet access.

anyone been there? what did you do?

regards,
juergen Received on Tue Sep 29 1998 - 05:43:17 CDT