RE: No value or full path in v$session.program

RE: No value or full path in v$session.program

 

  


use the table PRODUCT_PROFILE

Rgds,
Joey



-----Original Message-----
From: Jeffrey Beckstrom
[mailto:oracledba-ezmlmshield-x60774278.[Email address protected]
Sent: Thursday, October 07, 2004 8:16 PM
To: LazyDBA Discussion
Subject: Re: No value or full path in v$session.program


We do this as well with the understanding that a smart user could simply
rename their program to one of the allowed ones and get by the security.

Regarding the value, we have seen it varies by the client version.
Some client versions (believe 8.0) it did not load it at all.

Jeffrey Beckstrom
Database Administrator
Greater Cleveland Regional Transit Authority
1240 W. 6th Street
Cleveland, Ohio 44113

>>> "Joakim Olsson "
<oracledba-ezmlmshield-x61076420.[Email address protected] 10/7/04 10:22:56
AM >>>

Hi all,

We have a problem when trying to restrict access to the database for the
users. The requirements from management is that users should only be
allowed access via our applications and not via query tools etc.

We tried to implement this with a logon-trigger which allowed only
specific applications based on v$session.program.

This seems to work ok in most cases but we have stumbled upon some
obstacles. Some users get no value at all in v$session.program and some

users get the full path to the application.

What might be the reason for this behaviour?

Best regards,
Joakim


--------
website: http://www.LazyDBA.com
Please don't reply to RTFM questions
Oracle documentation is here: http://tahiti.oracle.com
To unsubscribe: see http://www.lazydba.com/unsubscribe.html
To subscribe: see http://www.lazydba.com
By using this list you agree to these
terms:http://www.lazydba.com/legal.html




--------
website: http://www.LazyDBA.com
Please don't reply to RTFM questions
Oracle documentation is here: http://tahiti.oracle.com
To unsubscribe: see http://www.lazydba.com/unsubscribe.html
To subscribe: see http://www.lazydba.com
By using this list you agree to these
terms:http://www.lazydba.com/legal.html

Oracle LazyDBA home page