Re: Application userid security

On Fri, 12 Apr 2002 21:28:18 GMT, Richard Kuhler <noone_at_nowhere.com> wrote:

>Sound like your requirement is:
>
>1. A developer is allowed to use the application to connect to the
>production database.
>2. That exact same machine should not be allowed to connect to the
>production database with any other tool using the Oracle account the
>application connects with.
>3. That exact same machine should be allowed to connect to the
>production database using some other Oracle account.
>
>Is that right?
>
>
>If so, this requires authenticating the application. Without embedding
>a secret password in the application I can see no way to achieve that.
>
>
>Richard
>

<snippage>

That pretty will sums it up. Looks like I'm headed back to the drawing board, and more analysis of how the access is controlled on the mainframe, since that is what management wants to replicate/emulate.

• Ed