Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Re[2]: Preventing logins from applications
In oracle 8i, you may take a look at product_profile table. You can prevent users from using sqlplus by adding the following in this table:
INSERT INTO Product_profile (product, userid, attribute, char_value) VALUES ('SQL*Plus','AMAR','SELECT','DISABLED');
Dig into this, you may be able to prevent other apps from accessing accordingly.
rgds
amar
-----Original Message-----
From: John Lewis [mailto:jlewis_at_punchnetworks.com]
Sent: Tuesday, August 28, 2001 11:34 PM
To: Multiple recipients of list ORACLE-L
Subject: RE: Re[2]: Preventing logins from applications
Perhaps a tack that explains to management the threat (real or imagined) of un-authorized program access. Couch it in a dollars-lost-from-fixing-problems sense. This usually gets their attention.
-----Original Message-----
Sent: Tuesday, August 28, 2001 11:33 AM
To: Multiple recipients of list ORACLE-L
Charlie,
That's all well and good, my try at it was on V7, but in my case the
users
revolted to upper management. And you know where the manure landed!!!
Dick Goulet
____________________Reply Separator____________________Author: "Charlie Mengler" <charliem_at_mwh.com> Date: 8/28/2001 8:16 AM
This can be accomplished by creating a login trigger that checks the "PROGRAM" name within V$SESSION. You can create a table that contains whitelisted program names & simply terminate any session that uses a program that does not exist within your authorized list of programs.
Denham Eva wrote:
>
> Hi Gurus
>
> Has anyone ever had to prevent users from accessing the Database from
other
> applications other than those sanctioned by the company.
> ie prevent users accessing the database using Microsoft's Access and yet
> still be able to access via the company application which also uses ODBC.
> OR preventing users accessing the DB via sqlplus but still through the
app.
>
> I would appreciate any knowledge that can be shared on this topic.
> Many Thanks
> Denham
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Denham Eva
> INET: EvaD_at_TFMC.co.za
-- Charlie Mengler Maintenance Warehouse charliem_at_mwh.com 10641 Scripps Summit Ct. 858-831-2229 .NET? Not yet! San Diego, CA 92131 -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Charlie Mengler INET: charliem_at_mwh.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: dgoulet_at_vicr.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: John Lewis INET: jlewis_at_punchnetworks.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Wed Aug 29 2001 - 08:10:16 CDT