Re: Granting a role to a session ?

Richard Elliott wrote:

> I want to grant an update role to a user when they connect from a
> client app.. This is so I can set up users in Oracle with no update
> privileges due to the same users using ODBC to run queries. I want the
> users to only be able to update the data if they are running a client
> that has row level security code in it. If I grant the update role to
> the user in the client, what keeps them from running the client, then
> connecting ODBC and running an update.
>
> What I want is to be able to alter the session, not the user. Is this
> possible ?
> I don't see it in my books. Of course if I'm totally off track, some
> direction would be much appreciated. I read in other post where this
> was the preferred method, but see a large hole in it as I understand
> it.
>
> Thanks in advance for the help.

Use an AFTER-LOGON trigger
http://www.psoug.org/reference/ddl_trigger.html and session information about the tool being used to connect to grant the privilege on-the-fly.

-- 
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan_at_x.washington.edu
(replace 'x' with a 'u' to reply)