Re: Disable certain users from login to database while applying Human
Probably this might help u to arrive at a solution rather than giving the actual solution In certain situations, you may want to log in to another schema to operate on that user's objects like granting privileges, but you don't know the password for that schema and you can't wait until that user is available to assist you. Consider this situation. A typical database has the following users: SYSTEM SYS MATERIALS ACCOUNTS Assume you don't know the password for both MATERIALS and ACCOUNTS, but you want to grant privileges on MATERIALS's objects to the ACCOUNTS schema immediately. You can't achieve this objective by logging into SYS or SYSTEM schema. You should have to log in to that schema for granting privileges to others. That is, you should have to be the owner to grant privileges on the objects. At the same time, you should not disturb the existing password of the MATERIALS schema. You can perform both the objectives using the following steps: 1. Connect as SYSTEM or SYS schema and issue the following sql command: SQL> select 'alter user '||username||' identified by values '''||password||'''' from dba_users where username='MATERIALS'; This will return a statement like the one below alter user MATERIALS identified by values 'D0DCC7D6877E8507'; Preserve this statement, as it will help you reset the original (existing) password after finishing the work. 2. Set the new password for the MATERIALS schema by giving the following sql command: SQL> alter user materials identified by password; Here you can set any password temporarily to complete the objectives. 3. Log in to the MATERIALS schema, grant the privilege on certain objects to the ACCOUNTS schema and whatever jobs you want to complete in that schema. 4. Connect as the SYS or SYSTEM schema and execute the preserved statement. SQL> alter user MATERIALS identified by values 'D0DCC7D6877E8507'; This will reset the password to the previous one, and the user's work won't be affected. Cheers Fazal --- [EMAIL PROTECTED] wrote: > > As you are talking of Oracle Apps, NONE of the > suggested solutions : > 1. Database ON LOGON Trigger > 2. Lock Database Account > 3. Change Database Account Password > 4. Startup Database in Restricted mode > would work. > > The users connect to the Database in the APPS schema > -- this is the > "universal" > schema that Oracle Apps uses. The Patch requires > APPS so Restricted > doesn't > help (unless you grant Restricted to APPS in which > case all the users can > logon). > Ditto about locking, changing password or writing a > trigger on the APPS > schema. > > What you can do are : > 1. Shutdown the Apache server for the Self-Service > Modules > 2. Shutdown the Forms server for the Forms Module > 3. Shutdown the Concurrent Managers. > > All of the above would affect ALL users. > > Alternatively, login to the Application as the > System Administrator user > and > change the Application User Passwords for the users > whom you want disabled. > Change the passwords back to a default (WELCOME) > later. > > However, what you SHOULD do, per Oracle Support, is > 1. Shutdown 2. Shutdown > 3. Shutdown > as I have listed above. > If you are familiar with Oracle Applications > Patching and are comfortable > with reading > the Patch drivers, you can figure out what database > objects are being > modified/updated/created > and what Forms/Reports/HTML etc files are being > modified/created by the > patch. > Then you can take an intelligent decision > should you allow users to > logon when > applying the patch ? > > Hemant K Chitale > Principal DBA > Chartered Semiconductor Manufacturing Ltd > > > "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> >18/02/2002 03:28 PM > Sent by: [EMAIL PROTECTED] > > Please respond to ORACLE-L > > > > To: Multiple recipients of list > ORACLE-L <[EMAIL PROTECTED]> > > cc: (bcc: CHITALE Hemant > Krishnarao/IT/CHRT/ST Group) > > Subject: Disable certain users from > login to database while applying > > Human > > > > > >
Re: Disable certain users from login to database while applying Human
stop the listener. Make a FREE long distance call from your PC! http://www.eboom.com/free/ - Original Message - To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> Sent: Monday, February 18, 2002 01:23 PM Human > Pick One.. > > 1. Change the password.. and then reset to original. > 2. Revoke CREATE SESSION from user. > 3. Startup database in Restrict mode. > > Hope this helps.. > > - Original Message - > To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> > Sent: Sunday, February 17, 2002 11:28 PM > > > > Hi Gurus, > > > > I need to disable certain users from login to database while I apply the > > Human Resources Patches for our Oracle HR 11i Applications. > > Which is the best way to do it ? Should I write on-logon trigger to > disable > > or should I take away their privileges to logon to report/forms/sqlplus ? > > What about the rest of the DBA Applications administrator ? What do U guys > > do to solve the dead-lock problem (If my users access the HR tables while > I > > apply the patches, I will encounter dead-lock problem) ? > > > > Please advise. Thanks. > > > > Regds, > > New Bee > > -- > > Please see the official ORACLE-L FAQ: http://www.orafaq.com > > -- > > Author: CHAN Chor Ling Catherine (CSC) > > INET: [EMAIL PROTECTED] > > > > Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > > San Diego, California-- Public Internet access / Mailing Lists > > > > To REMOVE yourself from this mailing list, send an E-Mail message > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > > the message BODY, include a line containing: UNSUB ORACLE-L > > (or the name of mailing list you want to be removed from). You may > > also send the HELP command for other information (like subscribing). > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Nikunj Gupta > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California-- Public Internet access / Mailing Lists > > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Nikunj Gupta INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Disable certain users from login to database while applying Human
As you are talking of Oracle Apps, NONE of the suggested solutions :
1. Database ON LOGON Trigger
2. Lock Database Account
3. Change Database Account Password
4. Startup Database in Restricted mode
would work.
The users connect to the Database in the APPS schema -- this is the
"universal"
schema that Oracle Apps uses. The Patch requires APPS so Restricted
doesn't
help (unless you grant Restricted to APPS in which case all the users can
logon).
Ditto about locking, changing password or writing a trigger on the APPS
schema.
What you can do are :
1. Shutdown the Apache server for the Self-Service Modules
2. Shutdown the Forms server for the Forms Module
3. Shutdown the Concurrent Managers.
All of the above would affect ALL users.
Alternatively, login to the Application as the System Administrator user
and
change the Application User Passwords for the users whom you want disabled.
Change the passwords back to a default (WELCOME) later.
However, what you SHOULD do, per Oracle Support, is 1. Shutdown 2. Shutdown
3. Shutdown
as I have listed above.
If you are familiar with Oracle Applications Patching and are comfortable
with reading
the Patch drivers, you can figure out what database objects are being
modified/updated/created
and what Forms/Reports/HTML etc files are being modified/created by the
patch.
Then you can take an intelligent decision should you allow users to
logon when
applying the patch ?
Hemant K Chitale
Principal DBA
Chartered Semiconductor Manufacturing Ltd
"CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]>18/02/2002 03:28 PM
Sent by: [EMAIL PROTECTED]
Please respond to ORACLE-L
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
cc: (bcc: CHITALE Hemant Krishnarao/IT/CHRT/ST Group)
Subject: Disable certain users from login to database while applying
Human
Hi Gurus,
I need to disable certain users from login to database while I apply the
Human Resources Patches for our Oracle HR 11i Applications.
Which is the best way to do it ? Should I write on-logon trigger to disable
or should I take away their privileges to logon to report/forms/sqlplus ?
What about the rest of the DBA Applications administrator ? What do U guys
do to solve the dead-lock problem (If my users access the HR tables while I
apply the patches, I will encounter dead-lock problem) ?
Please advise. Thanks.
Regds,
New Bee
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: CHAN Chor Ling Catherine (CSC)
INET: [EMAIL PROTECTED]
Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Re: Disable certain users from login to database while applying Human
Pick One.. 1. Change the password.. and then reset to original. 2. Revoke CREATE SESSION from user. 3. Startup database in Restrict mode. Hope this helps.. - Original Message - To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> Sent: Sunday, February 17, 2002 11:28 PM > Hi Gurus, > > I need to disable certain users from login to database while I apply the > Human Resources Patches for our Oracle HR 11i Applications. > Which is the best way to do it ? Should I write on-logon trigger to disable > or should I take away their privileges to logon to report/forms/sqlplus ? > What about the rest of the DBA Applications administrator ? What do U guys > do to solve the dead-lock problem (If my users access the HR tables while I > apply the patches, I will encounter dead-lock problem) ? > > Please advise. Thanks. > > Regds, > New Bee > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California-- Public Internet access / Mailing Lists > > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Nikunj Gupta INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Disable certain users from login to database while applying Human
Startup the database in restricted mode - startup restrict; -Original Message- Sent: Monday, February 18, 2002 2:28 AM To: Multiple recipients of list ORACLE-L Human Hi Gurus, I need to disable certain users from login to database while I apply the Human Resources Patches for our Oracle HR 11i Applications. Which is the best way to do it ? Should I write on-logon trigger to disable or should I take away their privileges to logon to report/forms/sqlplus ? What about the rest of the DBA Applications administrator ? What do U guys do to solve the dead-lock problem (If my users access the HR tables while I apply the patches, I will encounter dead-lock problem) ? Please advise. Thanks. Regds, New Bee -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Seefelt, Beth INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Disable certain users from login to database while applying Human
>- Original Message - >From: "CHAN Chor Ling Catherine (CSC)" ><[EMAIL PROTECTED]> >To: Multiple recipients of list ORACLE-L ><[EMAIL PROTECTED]> >Sent: Sun, 17 Feb 2002 23:28:24 > >Hi Gurus, > >I need to disable certain users from login to >database while I apply the >Human Resources Patches for our Oracle HR 11i >Applications. >Which is the best way to do it ? Should I write >on-logon trigger to disable >or should I take away their privileges to logon to >report/forms/sqlplus ? >What about the rest of the DBA Applications >administrator ? What do U guys >do to solve the dead-lock problem (If my users >access the HR tables while I >apply the patches, I will encounter dead-lock >problem) ? > >Please advise. Thanks. > >Regds, >New Bee >-- >Please see the official ORACLE-L FAQ: >http://www.orafaq.com >-- >Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > Catherine, The simplest thing to do for maintenance operation is to shut the database down and to restart it in RESTRICT mode, which only allows people who have been granted the CONNECT RESTRICT privilege (in practice, accounts which have the DBA role) to connect. Shutting down the listener is also a solution, if you have to work on the server and all users are connected through SQL*Net, but beware that it will not terminate existing sessions. If you need to target *some* but not all users, you can revoke CREATE SESSION from them. Stephane Faroult Oriole Corporation Performance Tools & Free Scripts -- http://www.oriole.com, designed by Oracle DBAs for Oracle DBAs -- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroul INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Disable certain users from login to database while applying Human
Hi Gurus, I need to disable certain users from login to database while I apply the Human Resources Patches for our Oracle HR 11i Applications. Which is the best way to do it ? Should I write on-logon trigger to disable or should I take away their privileges to logon to report/forms/sqlplus ? What about the rest of the DBA Applications administrator ? What do U guys do to solve the dead-lock problem (If my users access the HR tables while I apply the patches, I will encounter dead-lock problem) ? Please advise. Thanks. Regds, New Bee -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
