RE: Read Only User

From: Reidy, Ron <Ron.Reidy_at_arraybiopharma.com>
Date: Thu, 16 Dec 2004 13:22:13 -0700
Message-ID: <17CAB0BF27BCFC47B0E4554A0E2F962B4391BD@fiji.arraybp.com>

Not good. What would stop mladen from altering his session to 'read = wirte' after he's connected?

---

Ron Reidy
Lead DBA
Array BioPharma, Inc.

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]On Behalf Of Juan Carlos Reyes Pacheco
Sent: Thursday, December 16, 2004 12:36 PM To: oracle-l_at_freelists.org
Subject: Re: Read Only User

Hi I search some solution and found this , Maybe this trigger could help in some cases,=20 why don't you test.
:)
=20

CREATE TRIGGER FON.SADFASDF
AFTER=20
LOGON
ON DATABASE
..
WHEN USER=3D'MLADEN' THEN SET TRANSACTION READ ONLY; ..
/
=20

Juan Carlos Reyes Pacheco
OCP
-------Original Message-------
=20

From: jkstill_at_gmail.com
Date: 12/16/04 15:28:19
To: charlottejanehammond_at_yahoo.com
Cc: ORACLE-L
Subject: Re: Read Only User
=20

This is something that should be handled by the application software.
=20

If this database is ever audited, it will fail the audit by doing this.
=20

The only read only accounts that are acceptable are generally for DBA's and app administrators, and for developers that need to see production data from outside the applicatoin.
=20

Jared
=20
=20
=20

On Thu, 16 Dec 2004 06:51:25 -0800 (PST), Charlotte Hammond <charlottejanehammond_at_yahoo.com> wrote:

> Hi all,
>
> I've been asked to shoehorn a user with "read only" access into a =

database
which wasn't designed to accommodate that. >
> Creating a role with select only on tables and views was easy but I'm struggling with how to handle packaged functions (which allow indirect access to view data). I can't grant execute on the whole package, as it = also
contains procedures that allow data changes. >
> I could create wrapper packages with only the functions exposed, but = that
looks like a great big maintenance swamp as this isn't a very stable app = and
the developers keep on changing the package interfaces.

>
> Any easier ideas? (9.2 btw)
>
> Thanks
> - Charlotte
>
> ---------------------------------
> Do you Yahoo!?
> Jazz up your holiday email with celebrity designs. Learn more.
>
> --
> http://www.freelists.org/webpage/oracle-l
>

=20
=20

--
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l

This electronic message transmission is a PRIVATE communication which =
contains
information which may be confidential or privileged. The information is =
intended=20
to be for the use of the individual or entity named above. If you are =
not the=20
intended recipient, please be aware that any disclosure, copying, =
distribution=20
or use of the contents of this information is prohibited. Please notify =
the
sender  of the delivery error by replying to this message, or notify us =
by
telephone (877-633-2436, ext. 0), and then delete it from your system.

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Dec 16 2004 - 14:25:45 CST