Connect grants other privs. Create this, create that. Alter session. Regards, Patrice Boivin Systems Analyst (Oracle Certified DBA)
Systems Admin & Operations | Admin. et Exploit. des syst�mes Technology Services | Services technologiques Informatics Branch | Direction de l'informatique Maritimes Region, DFO | R�gion des Maritimes, MPO E-Mail: [EMAIL PROTECTED] -----Original Message----- Sent: Friday, January 04, 2002 11:05 AM To: Multiple recipients of list ORACLE-L Subject: RE: How to stop access to prod instance ... One way to do it (kinda) is to ensure that all access to objects is via roles. Don't use public. Make sure the only privilege granted is connect or create session (don't remember which one grants other privs with it off the top of my head). Assign that role to the users but do not make it 'active'. Also, put a password on the role. Within the forms code you set the role on. (or you could use Oracle's FGAC) So that still allows access to Oracle via other products but they won't be able to do anything. You can use the Oracle profile to stop things that are Oracle from connecting though. Which would be the easiest way to stop things like SQL*Plus but there is nothing for things like TOAD to the best of my knowledge. -----Original Message----- Rajendra Sent: Friday, January 04, 2002 6:35 AM To: Multiple recipients of list ORACLE-L How does one stop access to prod instance by any product other than supplied homegrown Forms application? I mean no sqlplus, toad, tora and similar tools and their renamed derivatives?? All this needs to be done for all users incl developers except DBAs. Thanks in advance Raj ______________________________________________________ Rajendra Jamadagni MIS, ESPN Inc. Rajendra dot Jamadagni at ESPN dot com Any opinion expressed here is personal and doesn't reflect that of ESPN Inc. QOTD: Any clod can have facts, but having an opinion is an art! -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Kimberly Smith INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Boivin, Patrice J INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
