Security for data under sqlforms/sqlmenu

At our site, most operating system (unix) users have operator (OPS$..) oracle accounts. They use these accounts for their normal work, so we don't want to restrict them with Product User Profiles.

We have a (non-operator) account which contains the data for my application.

I want to write the application (in sqlforms/sqlmenu) so that users can manipulate the tables in the application account when they are using my application, but can't
(1) connect directly to the application account (containing the live data)

      either in sqlplus or from some application other than mine
(2) manipulate tables in the application account when connected to

      their operator accounts

At present, we are running oracle forms 3.0 and oracle 6.0. If you have a solution which requires forms 4 or oracle 7, then we are still interested because we will probably need to upgrade soon anyway.

We have performed some thought experiments and satisfied ourselves that this problem is not trivial. If anyone has experience with a similar problem, may we benefit from your wisdom?

I will summarise email responses for the net.

James Cone
(the person without a .sig) Received on Tue Nov 09 1993 - 22:15:15 CET