Re: SQL*Plus in readonly mode & Performance documentation

From: Scott Tiger <kml_at_cellar.org>
Date: 1 Feb 93 14:18:48 GMT
Message-ID: <2XqayB1w164w_at_cellar.org>


> Chris Little writes:
>
> >I am looking for a way to prevent certain Oracle users from accessing
> >the database using SQL*Plus, or perhaps they could use SQL*Plus, but
> >in readonly mode. Is there a way to do this?
> >
> >On another issue, I'm looking for documentation that encapsulates all
> >performance related topics that should be addressed by a DBA. I find
> >these topics to be quite "scattered" throughout the DBA Guide and wonder
> >if anybody has a single document on performance.
>

I use the system.product_user_profile table to make sure the only valid command a person can enter in SQL*Plus is 'SELECT'. For each user, for example, run a script (and pass the username as &&1 for this example):

insert into product_user_profile

( PRODUCT                        ,
 USERID                          ,
 ATTRIBUTE                       ,
 CHAR_VALUE                      )

values
('SQL*Plus',
 upper('&&1'),
 'INSERT',
 'DISABLED')
;

The user will now be unable to do an INSERT command in SQL*Plus. Repeat for all other commands. If you need to delete a record in this view, log in as system and delete from product_profile table.

::::::::::     ::    ::        :::::Alself me to myduce introlow
 Scott/::: ::::::< ::::: . :::::::::kml%cellar_at_tredysvr.tredydev.unisys.com
::Tiger::::::::::    :: ::: ::::::::kml_at_cellar.org  Damn the electric fence!
Received on Mon Feb 01 1993 - 15:18:48 CET

Original text of this message