RE: How to stop access to prod instance ...

From: Kimberly Smith <ksmith2_at_myfirstlink.net>
Date: Fri, 04 Jan 2002 18:20:30 -0800
Message-ID: <F001.003E79CA.20020104173521@fatcity.com>

Don't count on your end users not getting access to SQL*Plus. Now that you have made the statement someone is surely installing it. Granted users can have the ability to install on their PC's locked out but someone probably found a reason to have it returned to them and...

-----Original Message-----
Rajendra
Sent: Friday, January 04, 2002 8:50 AM
To: Multiple recipients of list ORACLE-L

Thanks all ...

The problem doesn't end here ... the requirements (loosely specified) are as follows

Developers and end users can access production ONLY through FORMS APPLICATION.
End users can't get to sqlplus so I am not even worried about that. It is developers that I am worried about.
Enabling roles at runtime is an option as long as we are not talking about reports. We use SQR and Oracle reports, a reports agent looks up requests and creates shell files on Unix server which are then scheduled to run. This scheme should work there as well.
How about people accessing tables through db links?

I don't think there is a 100% proof method, but basically I want to be able to restrict developers accessing the instance except through forms application. Dropping developer's accounts is not an option.

I thought over it, discussed it with my senior DBAs and finally I am turning to you guys. All the suggestions are helpful but I'd like to avoid as many loose ends as possible.

Thanks in advance
Raj

Rajendra Jamadagni MIS, ESPN Inc. Rajendra dot Jamadagni at ESPN dot com
Any opinion expressed here is personal and doesn't reflect that of ESPN Inc.

QOTD: Any clod can have facts, but having an opinion is an art!

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Kimberly Smith
INET: ksmith2_at_myfirstlink.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Fri Jan 04 2002 - 20:20:30 CST