RE: methodology to keep only certain programs to connect to

From: Jamadagni, Rajendra <Rajendra.Jamadagni_at_espn.com>
Date: Tue, 10 Sep 2002 15:50:15 -0400
Message-Id: <22528.293379@fatcity.com>

This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible.

------=_NextPartTM-000-8becd5e7-c4f3-11d6-a0dc-00508bbd2e09 Content-Type: multipart/alternative;

boundary="----_=_NextPart_001_01C25903.4840DEA0"

------_=_NextPart_001_01C25903.4840DEA0
Content-Type: text/plain;

charset="iso-8859-1"

Revoke all roles from all apps. You will have to change some code in authorized apps to enable roles after they log in to allow them to access the database. All stray applications won't do this, so even if they log in they won't be able to access anything.

BTW SQLPLUS and TOAD use dbms_application_info to set the module column in v$session. This you can capture in db-logon trigger and kill them. At that stage, it is way too early to change the module information.

Raj

Rajendra Jamadagni MIS, ESPN Inc.
Rajendra dot Jamadagni at ESPN dot com
Any opinion expressed here is personal and doesn't reflect that of ESPN Inc.

QOTD: Any clod can have facts, but having an opinion is an art!

-----Original Message-----
From: Jared.Still_at_radisys.com [mailto:Jared.Still_at_radisys.com] Sent: Tuesday, September 10, 2002 4:03 PM To: Multiple recipients of list ORACLE-L Subject: RE: methodology to keep only certain programs to connect to

You can't.

This is one of the reasons I haven't tried to use this.

Jared

------_=_NextPart_001_01C25903.4840DEA0
Content-Type: text/html;

charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>RE: methodology to keep only certain programs to connect =
to</TITLE>
</HEAD>
<BODY>

Revoke all roles from all apps. You will have to =
change some code in authorized apps to enable roles after they log in = to allow them to access the database. All stray applications won't do = this, so even if they log in they won't be able to access = anything.

BTW SQLPLUS and TOAD use dbms_application_info to set =
the module column in v$session. This you can capture in db-logon = trigger and kill them. At that stage, it is way too early to change the = module information.

Raj
 <FONT =

SIZE=3D2>______________________________________________________</FONT>

 Rajendra Jamadagni      =
        MIS, ESPN Inc.
 Rajendra dot Jamadagni at ESPN dot com
 Any opinion expressed here is personal and doesn't =
reflect that of ESPN Inc. 
 QOTD: Any clod can have facts, but having an opinion =
is an art!

 

-----Original Message-----
 From: Jared.Still_at_radisys.com [<A =
HREF=3D"mailto:Jared.Still_at_radisys.com">mailto:Jared.Still_at_radisys.com</= A>]
 Sent: Tuesday, September 10, 2002 4:03 PM
 To: Multiple recipients of list ORACLE-L
 Subject: RE: methodology to keep only certain =
programs to connect to

 

You can't.


This is one of the reasons I haven't tried to use =
this.


Jared


</BODY>
</HTML>

------_=_NextPart_001_01C25903.4840DEA0--

------=_NextPartTM-000-8becd5e7-c4f3-11d6-a0dc-00508bbd2e09 Content-Type: text/plain;

name="ESPN_Disclaimer.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;

filename="ESPN_Disclaimer.txt"

********************************************************************This e-mail message is confidential, intended only for the named recipient(s) above and may contain information that is privileged, attorney work product or exempt from disclosure under applicable law. If you have received this message in error, or are not the named recipient(s), please immediately notify corporate MIS at (860) 766-2000 and delete this e-mail message from your computer, Thank you.*********************************************************************2

Received on Tue Sep 10 2002 - 14:50:15 CDT