Re: Prevent use ODBC to connect Oracle Engine

From: <Ed.Stevens_at_nmm.nissan-usa.com>
Date: Fri, 11 Dec 1998 21:48:39 GMT
Message-ID: <74s3vn$clg$1@nnrp1.dejanews.com>

In article <74kvqh$cnh$1_at_news.seed.net.tw>, "Bill" <btzeng_at_ms1.hinet.net> wrote:
> Hi,
> For security concern, does anyone have the experience that :
> How can I config the DB to prevent user connect to Oracle DB on Unix by ODBC
> ?
> (I prefer user using sql*net client only !!)
>
> Thanks.
>
>

Ultimately, I don't think you can. As I mentioned in another reply in this thread, even if you remove the Oracle ODBC drivers, there are others (most noteably Microsoft) that users can load on their machines if they want to get to your databases with MS Access, etc. We have the same problem, and the only thing we've come up with is to very tightly control the userids and passwords. We have one userid that we grant only CREATE SESSION and SELECT to. All known users with a need are given the knowledge of this userid. We have another userid, known only to the DBAs and changed frequently, that our home-grown applications use for update purposes.
--
Ed Stevens
Nissan Motor Mfg. Corp., USA

-----------== Posted via Deja News, The Discussion Network ==---------- http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own Received on Fri Dec 11 1998 - 15:48:39 CST