Re: block access to database server

Oracle4Unix wrote:

> Hi gurus:
>
> I saw someone said that the best option to limit users to access
> database server only through specified application written in pro*c,
> forms, for example, is to "grant them access through a role which is
> not enabled by default. When you log in using the app, your startup
> code issues the appropiate commands to enable the role".
>
> Can someone elaborate this point for me? Assume users are ONLY allowed
> to get into database via forms, how to achieve it?

Have the code in the WHEN-NEW-FORM-INSTANCE trigger perfrom a SET ROLE.

Alternatively, as I have done, have the form log on as a user unknown to anyone other than the DBA.

Alternatively, use an AFTER-LONGON trigger to enable the role.

For more information go to: http://tahiti.oracle.com.

-- 
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan_at_x.washington.edu
(replace 'x' with a 'u' to reply)