RE: How to Restrict Access to Sql Plus?

RE: How to Restrict Access to Sql Plus?

 

  

Raghu,

there is no way to stop a connection via sqlplus.

simply because, someon can change the name of the executable to RAGHUSQL and
connect to the database.

someone else can use ACCESS, or EXCEL, or WORD, or TOAD to connect to the
database. how are you going to stop those tools from connecting?

If you want to stop someone from connecting to the database with ANY tool,

1). do not give them an oracle account
2). change the password of the common account that they connect to the
database with
3). do NOT give them any account information that the application uses.
4). repeat #2 above on a weekly basis.

the database is only as secure as YOU make it - anyone who trys to protect a
database by taking tools away is hiding their head in the sand - it simply
does not work - there are too many tools that will connect to the database.

good luck!

Tom Mercadante
Oracle Certified Professional


-----Original Message-----
From: Raghavendra Shenoy [mailto:[Email Address Removed] Thursday, May 31, 2001 2:44 PM
To: LazyDBA.com Discussion
Subject: How to Restrict Access to Sql Plus?


Hi List,

I want to restrict all the users not to login into
oracle through SQL Plus. We are using Oracle 8.0.5 on
Windows NT. I tried to write a system trigger but it
is not working since that is available only from 8i. I
have deleted the sqlplus exe file from some of the
client machines. But any other proper way to do it.

One more doubt: We have one user in oracle which is
used in the application to access the database. I want
to restrict this user not to use drop table command.
What is the best way to do this?
TIA,

Raghu




____________________________________________________________
Do You Yahoo!?
For regular News updates go to http://in.news.yahoo.com

--------
Oracle documentation is here:
http://tahiti.oracle.com/pls/tahiti/tahiti.homepage
To unsubscribe: send a blank email to oracledba-[Email Address Removed] subscribe: send a blank email to oracledba-[Email Address Removed] the list archive: http://www.LAZYDBA.com/odbareadmail.pl
Tell yer mates about http://www.farAwayJobs.com
By using this list you agree to these
terms:http://www.lazydba.com/legal.html
Oracle LazyDBA home page