Re: Restricting internal access to users.

jiju wrote:

> hello,
>
> How do I restrict internal account access to database users? I created
> a user called user1 and granted him connect and resource privileges.
> Now after I connect as user1, I tried 'connect internal' and I get
> connected to the database as 'SYS' which is dangerous. How can I
> restrict this such that when user1 tries to 'connect internal' it will
> prompt for the password. Please help.
>
> Thanks in advance.
>
> jiju

Log on as SYS and perform the following:

DROP ROLE connect;
DROP ROLE resource;
DROP ROLE dba;

That is what Oracle recommends.

Now create specific roles that relate to what people actually do and assign those to your users.

--
Daniel Morgan
http://www.outreach.washington.edu/extinfo/certprog/oad/oad_crs.asp
damorgan_at_x.washington.edu
(replace 'x' with a 'u' to reply)