Return-Path: <root@fatcity.cts.com>
Received: from ensim.rackshack.net (root@localhost)
 by orafaq.net (8.11.6/8.11.6) with ESMTP id h0I1b4803196
 for <oracle-l@orafaq.net>; Fri, 17 Jan 2003 19:37:04 -0600
X-ClientAddr: 209.68.248.164
Received: from newsfeed.cts.com (newsfeed.cts.com [209.68.248.164])
 by ensim.rackshack.net (8.11.6/8.11.6) with ESMTP id h0I1b4p03191
 for <oracle-l@orafaq.net>; Fri, 17 Jan 2003 19:37:04 -0600
Received: from fatcity.UUCP (uucp@localhost)
 by newsfeed.cts.com (8.9.3/8.9.3) with UUCP id OAA62432;
 Fri, 17 Jan 2003 14:17:56 -0800 (PST)
Received: by fatcity.com (26-Feb-2001/v1.0g-b72/bab) via UUCP id 00533924; Fri, 17 Jan 2003 13:59:28 -0800
Message-ID: <F001.00533924.20030117135928@fatcity.com>
Date: Fri, 17 Jan 2003 13:59:28 -0800
To: Multiple recipients of list ORACLE-L <ORACLE-L@fatcity.com>
X-Comment: Oracle RDBMS Community Forum
X-Sender: "Todd Carlson" <tcarlson@TRIPOS.COM>
Sender: root@fatcity.com
Reply-To: ORACLE-L@fatcity.com
Errors-To: ML-ERRORS@fatcity.com
From: "Todd Carlson" <tcarlson@TRIPOS.COM>
Subject: RE: Limiting user connections with DBA Studio
Organization: Fat City Network Services, San Diego, California
X-ListServer: v1.0g, build 72; ListGuru (c) 1996-2001 Bruce A. Bergman
Precedence: bulk
Mime-Version: 1.0
Content-Type: multipart/alternative;	boundary="--=_NextPart_ST_15_57_08_Friday_January_17_2003_15249"
----=_NextPart_ST_15_57_08_Friday_January_17_2003_15249
Content-Type: text/plain;
 charset="us-ascii"
Content-Transfer-Encoding: 7bit

You should kill the previous DBA too. ;-)
 
Todd
 
-----Original Message-----
maheswara.rao@sungard.com
Sent: Friday, January 17, 2003 2:24 PM
To: Multiple recipients of list ORACLE-L
 
Todd,
 
The previous DBA has granted them almost all the privileges except DBA
privilege.  Now, when we tried to take away this SELECT_CATALOG_ROLE,
then, these specific users started raising alarms.
 
So, what we are planning is to kill their session the moment we find
that they are using DBA Studio. 
 
Rao
-----Original Message-----
Sent: Friday, January 17, 2003 2:10 PM
To: Multiple recipients of list ORACLE-L
They can't use it unless they can select from the data dictionary views.
For example, if they don't the SELECT_CATALOG_ROLE role or DBA privs in
8.1.7 they can not use DBA Studio.
 
Todd
 
-----Original Message-----
maheswara.rao@sungard.com
Sent: Friday, January 17, 2003 11:09 AM
To: Multiple recipients of list ORACLE-L
 
Some of our users installed OEM on their local PC's.  They connect to
the database through DBA Studio.
 
Is there any way to prevent DBA Studio connections to the server?  I am
thinking of using on_logon trigger but no clue how to catch the
connection.
 
Any suggestions?
 
Rao

----=_NextPart_ST_15_57_08_Friday_January_17_2003_15249
Content-Type: text/html;
 charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"=
>


<meta name=3DProgId content=3DWord.Document>
<meta name=3DGenerator content=3D"Microsoft Word 10">
<meta name=3DOriginator content=3D"Microsoft Word 10">
<link rel=3DFile-List href=3D"cid:filelist.xml@01C2BE41.16566E70">
<title>RE: Database Verification</title>
<!--[if gte mso 9]><xml>
 <o:OfficeDocumentSettings>
  <o:DoNotRelyOnCSS/>
 </o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:SpellingState>Clean</w:SpellingState>
  <w:DocumentKind>DocumentEmail</w:DocumentKind>
  <w:EnvelopeVis/>
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 </w:WordDocument>
</xml><![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;
	mso-font-charset:0;
	mso-generic-font-family:swiss;
	mso-font-pitch:variable;
	mso-font-signature:553679495 -2147483648 8 0 66047 0;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{mso-style-parent:"";
	margin:0in;
	margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	font-family:"Times New Roman";
	mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;
	text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;
	text-underline:single;}
p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig
	{margin:0in;
	margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	font-family:"Times New Roman";
	mso-fareast-font-family:"Times New Roman";}
span.EmailStyle18
	{mso-style-type:personal;
	mso-style-noshow:yes;
	mso-ansi-font-size:10.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Arial;
	mso-ascii-font-family:Arial;
	mso-hansi-font-family:Arial;
	mso-bidi-font-family:Arial;
	color:navy;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	mso-style-noshow:yes;
	mso-ansi-font-size:10.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Arial;
	mso-ascii-font-family:Arial;
	mso-hansi-font-family:Arial;
	mso-bidi-font-family:Arial;
	color:navy;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;
	mso-header-margin:.5in;
	mso-footer-margin:.5in;
	mso-paper-source:0;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
 /* Style Definitions */=20
 table.MsoNormalTable
	{mso-style-name:"Table Normal";
	mso-tstyle-rowband-size:0;
	mso-tstyle-colband-size:0;
	mso-style-noshow:yes;
	mso-style-parent:"";
	mso-padding-alt:0in 5.4pt 0in 5.4pt;
	mso-para-margin:0in;
	mso-para-margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:10.0pt;
	font-family:"Times New Roman";}
</style>
<![endif]-->
</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple style=3D'tab-interval:.5in'>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span style=3D=
'font-size:
10.0pt;font-family:Arial;color:navy'>You should kill the previous DBA too. =
;-)<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span style=3D=
'font-size:
10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></span></font></p>

<div>

<p class=3DMsoAutoSig><font size=3D2 color=3Dnavy face=3DArial><span style=3D=
'font-size:
10.0pt;font-family:Arial;color:navy;mso-no-proof:yes'>Todd<o:p></o:p></span=
></font></p>

</div>

<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span style=3D=
'font-size:
10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 face=3DTahom=
a><span
style=3D'font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br=
>
<b><span style=3D'font-weight:bold'>From:</span></b> root@fatcity.com
[mailto:root@fatcity.com] <b><span style=3D'font-weight:bold'>On Behalf Of =
</span></b>maheswara.rao@sungard.com<br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Friday, January 17, 20=
03
2:24 PM<br>
<b><span style=3D'font-weight:bold'>To:</span></b> Multiple recipients of l=
ist
ORACLE-L<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> RE: Limiting user
connections with DBA Studio</span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 face=3D"Time=
s New Roman"><span
style=3D'font-size:12.0pt'><o:p>&nbsp;</o:p></span></font></p>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dblue=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:blue'>Todd,</span></font>=
<o:p></o:p></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 face=3D"Time=
s New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dblue=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:blue'>The previous DBA ha=
s
granted them almost all the privileges except DBA privilege.&nbsp; Now, whe=
n we
tried to take away this SELECT_CATALOG_ROLE, then, these specific users sta=
rted
raising alarms.</span></font><o:p></o:p></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 face=3D"Time=
s New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dblue=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:blue'>So, what we are pla=
nning
is to kill their session the moment we find that they are using DBA
Studio.&nbsp;</span></font><o:p></o:p></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 face=3D"Time=
s New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dblue=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:blue'>Rao</span></font><o=
:p></o:p></p>

</div>

<blockquote style=3D'margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'=
>

<p class=3DMsoNormal style=3D'mso-margin-top-alt:0in;margin-right:0in;margi=
n-bottom:
12.0pt;margin-left:.5in'><font size=3D2 face=3DTahoma><span style=3D'font-s=
ize:10.0pt;
font-family:Tahoma'>-----Original Message-----<br>
<b><span style=3D'font-weight:bold'>From:</span></b> Todd Carlson
[mailto:tcarlson@TRIPOS.COM]<br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Friday, January 17, 20=
03
2:10 PM<br>
<b><span style=3D'font-weight:bold'>To:</span></b> Multiple recipients of l=
ist
ORACLE-L<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> RE: Limiting user
connections with DBA Studio<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dnavy=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy'>They can&#8217;t us=
e it
unless they can select from the data dictionary views. For example, if they
don&#8217;t the SELECT_CATALOG_ROLE role or DBA privs in 8.1.7 they can not=
 use
DBA Studio.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dnavy=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></=
span></font></p>

<div>

<p class=3DMsoAutoSig style=3D'margin-left:.5in'><font size=3D2 color=3Dnav=
y
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial;color:navy;
mso-no-proof:yes'>Todd<o:p></o:p></span></font></p>

</div>

<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 color=3Dnavy=
 face=3DArial><span
style=3D'font-size:10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></=
span></font></p>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D2 face=3DTaho=
ma><span
style=3D'font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br=
>
<b><span style=3D'font-weight:bold'>From:</span></b> root@fatcity.com
[mailto:root@fatcity.com] <b><span style=3D'font-weight:bold'>On Behalf Of =
</span></b>maheswara.rao@sungard.com<br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Friday, January 17, 20=
03
11:09 AM<br>
<b><span style=3D'font-weight:bold'>To:</span></b> Multiple recipients of l=
ist
ORACLE-L<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> Limiting user conne=
ctions
with DBA Studio</span></font><o:p></o:p></p>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D3 face=3D"Tim=
es New Roman"><span
style=3D'font-size:12.0pt'><o:p>&nbsp;</o:p></span></font></p>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D2 color=3Dblu=
e
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial;color:blue'>=
Some of our
users installed OEM on their local PC's.&nbsp; They connect to the database
through DBA Studio.</span></font><o:p></o:p></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D3 face=3D"Tim=
es New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D2 color=3Dblu=
e
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial;color:blue'>=
Is there
any way to prevent DBA Studio connections to the server?&nbsp; I am thinkin=
g of
using on_logon trigger but no clue how to catch the connection.</span></fon=
t><o:p></o:p></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D3 face=3D"Tim=
es New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D2 color=3Dblu=
e
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial;color:blue'>=
Any
suggestions?</span></font><o:p></o:p></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D3 face=3D"Tim=
es New Roman"><span
style=3D'font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal style=3D'margin-left:1.0in'><font size=3D2 color=3Dblu=
e
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial;color:blue'>=
Rao</span></font><o:p></o:p></p>

</div>

</blockquote>

</div>

</body>

</html>

----=_NextPart_ST_15_57_08_Friday_January_17_2003_15249--

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Todd Carlson
  INET: tcarlson@TRIPOS.COM

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

