Re: Security for sqlplus--

MIS wrote:
>
> Brian Spears <brian_spears_at_dsi.bc.ca> wrote in article
> <32C01FD6.3ABA_at_dsi.bc.ca>...
> > HI,
> >
> > Does anyone know how to limit how SQLPLUS is used. Ie. All users
> > have all privs to schema through an application's standard use of
> > ORACLE. I want to allow users to use sql*plus with select privilege
> > only. Can I control who can access sql*plus? If so I could create
> > a user with no quota and only select privs to access sql*plus. This
> > solution would do if I can control user access to the tool.
> >
> > If I can not control users - tool, does anyone know of another
> > way to save the database. I know of a 3rd party tool but I
> > want to avoid this if possible for the present time.
> >
> > Brian Spears
> > DBA , Dynapro

Limitation of users on an application level works with the table PRODUCT_USER_PROFILE.
Run the scripts v7pup.sql and pupbld.sql in the SYSTEM account, which create the table,
some views and grant privileges to public. Then you simply insert the following records
into the table PRODUCT_USER_PROFILE:

PRODUCT USERID ATTRIBUTE CHAR_VALUE Remark (not a column)

SQL*Plus	%		INSERT		DISABLED	No user can use command
								insert into ...
SQL*Plus	%		DELETE		DISABLED	No user can use command
								delete from ...
SQL*Plus	%		UPDATE		DISABLED	No user can use command
								update ...

Read the help for further information.

Bye, Alex Received on Mon Jan 06 1997 - 00:00:00 CST