Re: How to audit/trigger "ALTER SESSION" Statements?

From: <stephen.howard_at_us.pwcglobal.com>
Date: 22 Apr 2005 08:40:54 -0700
Message-ID: <1114184454.361893.59880@o13g2000cwo.googlegroups.com>

Among other things, Michael wrote:
> Alternatively it seems that anybody can issue the statement ALTER
> SESSION SET cursor_sharing=force EVEN when ALTER SESSION is beeing
> revoked from the user.
> How can I revoke this specific statement from a user?
>
> Any hints are incredibly welcomed
>
> Michael

ALTER SESSION is implicitly granted to a user with CREATE SESSION, with the exception of certain things like setting sql_trace.

You can use the product_profile_table under the system schema to restrict the commands, such as ALTER, available to a user. They will receive an SP- error when they attempt to execute the given command.

Regards,

Steve Received on Fri Apr 22 2005 - 10:40:54 CDT