PRODUCT_USER_PROFILE, does it work?

Hi,

I read in a book titled ORACLE DBA Handbook. It says that using PRODUCT_USER_PROFILE tables it's possible to disable certain commands and ROLES when user login from SQL*Plus. The commands such as CONNECT, HOST, UPDATE, DELETE can be disabled. Certain ROLES can also be disabled when login using SQL*Plus.

However, I couldn't find the same information in ORACLE7 Server Administrator's Guide. Neither in ORACLE7 Server Application Developer's Guide. I tried it out in Personal Oracle7 on Windows, but it doesn't seems to work. What I did (using SQL*Plus v3.1) was:

	connect system/password
	insert into product_user_profile
		(product, userid, attribute, char_value) values
		('SQL*Plus','SCOTT','HOST','DISABLED');
	commit;

	connect scott/password
	host dir

Nothing happen, it just ignored the entries in PRODUCT_USER_PROFILE and execute the MS-DOS dir command. Same thing for CONNECT command as well.

Since I haven't got any server to test this out yet. Can someone please confirm whether or not this works. This feature is crucial to our database design consideration. The environment will be Windows client talks to UNIX server via SQL*Net v2. The End-User's tools are SQL*Plus and other Data Browser.

Any comment will be appreciated. Thanks in advance.

Best regards,

--
Eddy Setiawan, DBA
National Computer Board of Singapore (NCB)
e-mail: setiawan_at_singnet.com.sg
phone: +65 330 6779  fax: +65 337 8455  telex: RS 26233
Disclaimer: Opinions expressed are strictly private.