Re: The user can still connect even after CREATE SESSION privilege is revoked

lanegroups_at_go.com wrote:
> I want to prevent UserA to connect to databaseX, so I used userAdmin to
> connect to databaseX, and userAdmin issued
> set role none;
> Role set.
> commit;
>
> If userA has to issue these 3 commands to prevent itself from
> connection, it's odd.
>
> So after userAdmin issued the 3 command above, UserA can still connect
> to database.
>
> What else is missing?
> Or this indeed a bug in Oracle 10g?

User likely is a member of the DBA group (UNIX) or ORA_DBA group (Windows).

Personally this what I'd do:
SQL> ALTER USER <user_name> ACCOUNT LOCK;

If they then get in you have a problem that requires HR or the police.

-- 
Daniel A. Morgan
http://www.psoug.org
damorgan_at_x.washington.edu
(replace x with u to respond)