Yechiel,

this is a never-ending chase.  security by attempting to control what
program is to be used is useless.  it will always be broken - or the DBA
will always be stuck monitoring what is being used.


security based on Oracle Roles is the only good answer.

Tom Mercadante
Oracle Certified Professional


-----Original Message-----
Sent: Tuesday, October 08, 2002 1:54 PM
To: Multiple recipients of list ORACLE-L


Just deny login if your trigger does not know the program.

Check the archives for example scripts for login triggers.

Yechiel Adar
Mehish
----- Original Message -----
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
Sent: Thursday, October 03, 2002 8:08 PM


> Oups ! you're right.
>  --- Kevin Lange <[EMAIL PROTECTED]> a écrit : > Except
> for the fact that they could always change
> > the program name that they
> > are running to match what you need.   Then that
> > security is bypassed.
> >
> >
> >
> > -----Original Message-----
> > Sent: Thursday, October 03, 2002 11:08 AM
> > To: Multiple recipients of list ORACLE-L
> >
> >
> > In homemade applications, by default users have a
> > role
> > with read only, in the applications we change the
> > default role that allows insert, update, delete.
> >
> > I've not tested this scenario but how about if, in a
> > database logon trigger, you check the
> > v$process.program field then depending of that value
> > you may be able to change the user default's role.
> >
> > Should work on 8i using dedicated connection.
> >
> >
> >  --- [EMAIL PROTECTED] a écrit : > Hi All,
> > >
> > > We have users that have OPS$ accounts that have
> > full
> > > DML privs when they
> > > run forms application via citrix. Currently they
> > do
> > > not have sqlplus,etc.  There is a requirement that
> > > some can have
> > > sqlplus,toad,etc.  I know you can set up security
> > > for sqlplus,etc
> > > using product_user_profile but is there a way to
> > > allow only SELECT when
> > > using a 3rd party tool such as TOAD.
> > >
> > > Thanks
> > > Rick
> > >
> > >
> > >
> > > --
> > > Please see the official ORACLE-L FAQ:
> > > http://www.orafaq.com
> > > --
> > > Author:
> > >   INET: [EMAIL PROTECTED]
> > >
> > > Fat City Network Services    -- 858-538-5051
> > > http://www.fatcity.com
> > > San Diego, California        -- Mailing list and
> > web
> > > hosting services
> > >
> >
> ---------------------------------------------------------------------
> > > To REMOVE yourself from this mailing list, send an
> > > E-Mail message
> > > to: [EMAIL PROTECTED] (note EXACT spelling of
> > > 'ListGuru') and in
> > > the message BODY, include a line containing: UNSUB
> > > ORACLE-L
> > > (or the name of mailing list you want to be
> > removed
> > > from).  You may
> > > also send the HELP command for other information
> > > (like subscribing).
> >
> > =====
> > Stéphane Paquette
> > DBA Oracle, consultant entrepôt de données
> > Oracle DBA, datawarehouse consultant
> > [EMAIL PROTECTED]
> >
> >
> ___________________________________________________________
> > Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et
> > en français !
> > Yahoo! Mail : http://fr.mail.yahoo.com
> > --
> > Please see the official ORACLE-L FAQ:
> > http://www.orafaq.com
> > --
> > Author: =?iso-8859-1?q?paquette=20stephane?=
> >   INET: [EMAIL PROTECTED]
> >
> > Fat City Network Services    -- 858-538-5051
> > http://www.fatcity.com
> > San Diego, California        -- Mailing list and web
> > hosting services
> >
> ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of
> > 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > (or the name of mailing list you want to be removed
> > from).  You may
> > also send the HELP command for other information
> > (like subscribing).
> > --
> > Please see the official ORACLE-L FAQ:
> > http://www.orafaq.com
> > --
> > Author: Kevin Lange
> >   INET: [EMAIL PROTECTED]
> >
> > Fat City Network Services    -- 858-538-5051
> > http://www.fatcity.com
> > San Diego, California        -- Mailing list and web
> > hosting services
> >
> ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of
> > 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > (or the name of mailing list you want to be removed
> > from).  You may
> > also send the HELP command for other information
> > (like subscribing).
>
> =====
> Stéphane Paquette
> DBA Oracle, consultant entrepôt de données
> Oracle DBA, datawarehouse consultant
> [EMAIL PROTECTED]
>
> ___________________________________________________________
> Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
> Yahoo! Mail : http://fr.mail.yahoo.com
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: =?iso-8859-1?q?paquette=20stephane?=
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
> San Diego, California        -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Yechiel Adar
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Mercadante, Thomas F
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to