Oracle Security

From: smorrow_at_dotrisc.cfr.usf.edu (Steve Morrow) Subject: Oracle Security
Organization: University of South Florida

Greetings All,

We want to ensure that our users access a database thru a particular application,
and not thru SQL*PLUS, or some other Oracle or 3rd party reporting tool or database residing on another host. Users will be restricted from the UNIX command line, and thus won't be able to execute commands.

I understand that the PRODUCT_USER_PROFILE table will allow you to 'disable' what user's can do within SQL*PLUS, but can other tools be specified? And moreover, is there a way of restricting access from other programs/DBs/tools? Does SQL*NET have such a capability to filter out users NOT coming in thru this application?

Any answers and/or comments are appreciated!

Thanks,
 STEVE

   ____   ___  ________  ________      
  /_  _] /_  ]/  ______)/  ______) _/| Steve Morrow, Sr. Programmer/Analyst
   / _/   / / / (____   / /___    _/ | University of South Florida
  / _/   / /  \____  ) / _____)  _/  | Internet: smorrow_at_dotrisc.cfr.usf.edu
 / _/___/ / ______/ / / /       _/   | Voice   : (813) 974-6889
(_________)(________)(___)______/    |______________________________________

--


|Fidonet:  Steve Morrow 2:283/618.99

|Internet: Steve.Morrow_at_p99.f618.n283.z2.fidonet.org

|

| Standard disclaimer: The views of this user are strictly his own.