Well......there's always the sneaky way....

Depending on which ODBC driver is in use, it will query data dictionary
views so that the front-end tool (i.e. MS-Access, MS-Excel, etc) can display
a list of objects.  I recall that the Oracle-supplied ODBC drivers tend to
start with ALL_OBJECTS while the MS-supplied ODBC drivers tend to start with
CAT or CATALOG or something like that.

Now, if you're really intent on restricting what ODBC users do, you can
create special versions of views like ALL_OBJECTS inside the accounts which
use ODBC.  Or, if you're really feeling frisky (and have some time), then
using FGAC can give you a very versatile view that can adapt to conditions.

In the situation where you want to disable access, you'd have the customized
special private view ALL_OBJECTS (used by the Oracle ODBC drivers) return no
rows, effectively allowing the ODBC user to connect but be unabled to do
anything.

In other situations, ODBC users get all hot and bothered about the thousands
of synonyms and other objects typically visible in Oracle from a query
against the standard ALL_OBJECTS view;  admittedly it gets quite untidy.  In
that case, you might create the custom version of ALL_OBJECTS to clean up so
they only see the stuff they want to see.

The possibilities can be limitless, but don't forget about these critters if
you're trying to debug something weeks or months later...  :-)


> From: "Igor Neyman" <[EMAIL PROTECTED]>
> Organization: Fat City Network Services, San Diego, California
> Reply-To: [EMAIL PROTECTED]
> Date: Fri, 14 Mar 2003 06:08:47 -0800
> To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
> Subject: Re: ODBC access to Oracle db
> 
> I don't think so.
> 
> Igor Neyman, OCP DBA
> [EMAIL PROTECTED]
> 
> 
> 
> ----- Original Message -----
> To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
> Sent: Friday, March 14, 2003 8:18 AM
> 
> 
>> Hi,
>> 
>> Is there a way to disable ODBC access to an Oracle database from the
> database
>> side?  Perhaps an init.ora setting or something?
>> 
>> TIA
>> 
>> Dwayne
>> 
>> 
>> --
>> Please see the official ORACLE-L FAQ: http://www.orafaq.net
>> --
>> Author: Dwayne Cox
>> INET: [EMAIL PROTECTED]
>> 
>> Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
>> San Diego, California        -- Mailing list and web hosting services
>> ---------------------------------------------------------------------
>> To REMOVE yourself from this mailing list, send an E-Mail message
>> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
>> the message BODY, include a line containing: UNSUB ORACLE-L
>> (or the name of mailing list you want to be removed from).  You may
>> also send the HELP command for other information (like subscribing).
>> 
>> 
> 
> 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Igor Neyman
> INET: [EMAIL PROTECTED]
> 
> Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
> San Diego, California        -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Tim Gorman
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to