Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Blocking "illegal" connections

Re: Blocking "illegal" connections

From: Walter K <alden14004_at_yahoo.com>
Date: Wed, 12 Dec 2001 23:26:38 -0800
Message-ID: <F001.003DB81B.20011212224020@fatcity.com>

Unfortunately, some of the Apps we have are "canned" and we don't have the ability to modify them as suggested.

Any ideas on the trigger approach?

Thanks again!
-w

> A close workaround is with roles. By default give
> everyone has 'create session' (so they at least log
> on), but any other privs they need come from a
> password protected role.
>
> The apps you write enable the role at login, so if
> anyone comes in not via an app, all they can do is
> login and nothing else...
>
> C
>
> --- Walter K <alden14004_at_yahoo.com> wrote: > Hi,
> >
> > We're trying to prevent users from connecting to our
> > production database via "illegal" connections (i.e.
> > tools like TOAD, etc.).
> >
> > Does anyone have any suggestions on how to block
> > connections from query tools (i.e. Toad, SQL Nav,
> > etc.) in such a way that an error message is
> > reported
> > back to the tool user that the connection is
> > prohibited? We've tried designing a logon trigger
> > with
> > a PRAGMA definition but the error message is not
> > getting relayed back to the client.
> >
> > As always, your feedback is appreciated!
> > -w
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Check out Yahoo! Shopping and Yahoo! Auctions for
> > all of
> > your unique holiday gifts! Buy at
> > http://shopping.yahoo.com
> > or bid at http://auctions.yahoo.com
> > --
> > Please see the official ORACLE-L FAQ:
> > http://www.orafaq.com
> > --
> > Author: Walter K
> > INET: alden14004_at_yahoo.com
> >
> > Fat City Network Services -- (858) 538-5051 FAX:
> > (858) 538-5051
> > San Diego, California -- Public Internet
> > access / Mailing Lists
> >
> --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of
> > 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > (or the name of mailing list you want to be removed
> > from). You may
> > also send the HELP command for other information
> > (like subscribing).
>
> =====
> Connor McDonald
> http://www.oracledba.co.uk (mirrored at
> http://www.oradba.freeserve.co.uk)
>
> "Some days you're the pigeon, some days you're the statue"
>
> __________________________________________________
> Do You Yahoo!?
> Everything you'll ever need on one web page
> from News and Sport to Email and Music Charts
> http://uk.my.yahoo.com
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: =?iso-8859-1?q?Connor=20McDonald?=
> INET: hamcdc_at_yahoo.co.uk
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Walter K
  INET: alden14004_at_yahoo.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Thu Dec 13 2001 - 01:26:38 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US