Granting a role to a session ?

I want to grant an update role to a user when they connect from a client app.. This is so I can set up users in Oracle with no update privileges due to the same users using ODBC to run queries. I want the users to only be able to update the data if they are running a client that has row level security code in it. If I grant the update role to the user in the client, what keeps them from running the client, then connecting ODBC and running an update.

What I want is to be able to alter the session, not the user. Is this possible ?
I don't see it in my books. Of course if I'm totally off track, some direction would be much appreciated. I read in other post where this was the preferred method, but see a large hole in it as I understand it.

Thanks in advance for the help. Received on Thu Jul 01 2004 - 07:17:33 CDT