Re: restricting users

Hi Eddie,

With the commands
  svrmgrl <<!
  connect internal
  alter system enable restricted session;   exit
  !
and
  svrmgrl <<!
  connect internal
  alter system disable restricted session;   exit
  !
you can turn on and off if the rdbms checks the restricted session privilege on connect. This privilege must be granted to all users you want to allow to connect.
  svrmgrl <<!
  connect internal
  grant restricted session to SpecialUser;   exit
  !
All dba-Users have the right to connect already.

If you only want to disallow a certain user to connect you can revoke the create session privilege for him/her.   svrmgrl <<!
  connect internal
  revoke create session from BadGuy;
  exit
  !

I would prefer to shutdown the database first and restart it with the restrict option, because living connections are not killed when you toggle the privilege:
  svrmgrl <<!
  connect internal
  shutdown immediate;
  startup restrict;
  exit;
  !

I hope this info helps a bit
Fred Stojentin

On 28 May 1999 07:07:14 GMT, elufker_at_swcp.com (Ed Lufker) wrote:

>Hi All:
>
> Is there a way to restrcit users from accessing the database.
>Could I put it together in a unix script and have the user run it? What
>privs or role would I need to grant to the database user that connects to
>the database via the script??
>
>
>thanks in advance for any help here
>eddie lufker
>
Received on Fri May 28 1999 - 03:31:50 CDT