Re: SQLnet security/access question

bgi_at_mindspring.com (Brad Isley) wrote:

>Given an Oracle database running on a server, and a workstation with
>SQL*Net, TCP/IP, and two client programs, A and B. I want to allow A
>and ONLY A to access the database. For example, A might be a custom
>program that updates the database while enforcing certain integrity
>constraints or security rules, while B is a generic ad hoc retrieval
>or update tool like SQL*Plus, Powerbuilder, etc. (In real life there
>would be many such workstations and more than just two client
>programs.)
>We're aware of firewall possiblities, but can only think of ways to
>apply this deny/allow rule at the host level. The problem we have
>is applying different rules to different applications on the same
>host.

Don - set up 2 roles in the database - one for full access, one for restricted access. Then have the applications set the applicable role before logging into the database. I know it can be done in Forms apps (heard it here before on the L); not sure about other methods.

Dennis Reed PG&E YMMV Received on Sat Mar 16 1996 - 00:00:00 CET