RE: Restrict certain database access using 3rd party tools.

From: Kevin Lange <kgel_at_ppoone.com>
Date: Thu, 03 Oct 2002 08:38:28 -0800
Message-ID: <F001.004DF6E0.20021003083828@fatcity.com>

Except for the fact that they could always change the program name that they are running to match what you need. Then that security is bypassed.

-----Original Message-----
Sent: Thursday, October 03, 2002 11:08 AM To: Multiple recipients of list ORACLE-L

In homemade applications, by default users have a role with read only, in the applications we change the default role that allows insert, update, delete.

I've not tested this scenario but how about if, in a database logon trigger, you check the
v$process.program field then depending of that value you may be able to change the user default's role.

Should work on 8i using dedicated connection.

• Rick_Cale_at_teamhealth.com a écrit : > Hi All,
  >
  > We have users that have OPS$ accounts that have full
  > DML privs when they
  > run forms application via citrix. Currently they do
  > not have sqlplus,etc. There is a requirement that
  > some can have
  > sqlplus,toad,etc. I know you can set up security
  > for sqlplus,etc
  > using product_user_profile but is there a way to
  > allow only SELECT when
  > using a 3rd party tool such as TOAD.
  >
  > Thanks
  > Rick
  >
  >
  >
  > --
  > Please see the official ORACLE-L FAQ:
  > http://www.orafaq.com
  > --
  > Author:
  > INET: Rick_Cale_at_teamhealth.com
  >
  > Fat City Network Services -- 858-538-5051
  > http://www.fatcity.com
  > San Diego, California -- Mailing list and web
  > hosting services
  >
  

  ---

  
  > To REMOVE yourself from this mailing list, send an
  > E-Mail message
  > to: ListGuru_at_fatcity.com (note EXACT spelling of
  > 'ListGuru') and in
  > the message BODY, include a line containing: UNSUB
  > ORACLE-L
  > (or the name of mailing list you want to be removed
  > from). You may
  > also send the HELP command for other information
  > (like subscribing).
  

  ---

Stéphane Paquette
DBA Oracle, consultant entrepôt de données Oracle DBA, datawarehouse consultant
stephane_paquette_at_yahoo.com

---

Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Yahoo! Mail : http://fr.mail.yahoo.com

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: =?iso-8859-1?q?paquette=20stephane?=
  INET: stephane_paquette_at_yahoo.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Kevin Lange
  INET: kgel_at_ppoone.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Thu Oct 03 2002 - 11:38:28 CDT