RE: How to stop access to prod instance ...

Raj,

Various methods. One I've used is that priv's are assigned to password protected roles and the role(s) to the users. The role is *not* enabled and all the users can do is create a session. Upon startup of the form, you can enable the role. Look for the topic "Setting and checking database roles at runtime" in the help system. It contains an example.

How fancy you want to get with it is up to you. You can password protect the role. Then do you hard code the password or look it up in a table or have it returned by a function? All kinds of variations on how tight you want to make it. If you obscure things enough, even a savvy user shouldn't be able to figure things out.

Specific to SQL*Plus only, you can also use Product User Profiles, but this does nothing for TOAD, TORA, etc.

Regards,

Larry G. Elkins
elkinsl_at_flash.net
214.954.1781

> -----Original Message-----
> From: root_at_fatcity.com [mailto:root_at_fatcity.com]On Behalf Of Jamadagni,
> Rajendra
> Sent: Friday, January 04, 2002 8:35 AM
> To: Multiple recipients of list ORACLE-L
> Subject: How to stop access to prod instance ...
>
>
> How does one stop access to prod instance by any product other
> than supplied
> homegrown Forms application?
>
> I mean no sqlplus, toad, tora and similar tools and their renamed
> derivatives?? All this needs to be done for all users incl
> developers except
> DBAs.
>
> Thanks in advance
> Raj
> ______________________________________________________
> Rajendra Jamadagni MIS, ESPN Inc.
> Rajendra dot Jamadagni at ESPN dot com
> Any opinion expressed here is personal and doesn't reflect that
> of ESPN Inc.
>
> QOTD: Any clod can have facts, but having an opinion is an art!
>
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Larry Elkins
  INET: elkinsl_at_flash.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).