Block unauthorized access to Oracle.

Hello

I would like to know if there was a way to block certain programs to access Oracle 9i?

We use the program ERP manufacturing Visual and want to block other programs access to (mark) the database (MS Query / MS Access), apart from the roles/system priv/object priv?

Thank you
Ryan

Published by: 850956 on April 27, 2011 13:33

Yes and no.

You cannot prevent a competent attacker to connect to the database of the program they would like to if you have their given username & password and if they have the connection information for the database. You can erect barriers that should keep most users not malicious to become too creative.

-If the programs you want to allow applications to three levels, you can use the TCP protocol. INVITED_NODES to limit the IP addresses are allowed to connect to the database. It would be more challenging to circumvent obstacles.
-You can create a logon trigger that looks at things like the PROGRAM area in V$ SESSION to throw an exception if incorrect client program is used. However, it is trivial to rename the SQL * more executable to match the name of the executable of the ERP to work around this restriction.
-If the Visual production happens to set other attributes in V$ SESSION (the MODULE and ACTION in particular), you can use the logon trigger as well. It's harder to move because he need someone write the code, but it certainly isn't foolproof.

Justin

Tags: Database

Similar Questions

  • my account has been temporarily blocked during an investigation of unauthorized access and now I can't connect to or re: access my account

    I created this account so that I can post this question on my real account associated with xbox live gamertag "kookamango" that is blocked.

    So far, I've dealt with xbox live support, which all have confirmed that this problem is not solvable on their end. My last support Xbox Live call reference number is 1160762648
    My account has unauthorized access and fraudulent charges have been made. The situation has been studied, and my money was refunded to me. The number of service request for the investigation of fraud was 1160762648. My account has been blocked in the investigation and is still blocked even if the investigation is completed and I was sent my email account recovery. Despite the reset my password several times and multiple recovery emails, I couldn't again access to my account, because he always goes to a window saying: "your account has been temporarily blocked."
    Please unblock my account windowslive

    Hello

    By facing the problem with Windows live account, it would be better to post the same question in the Windows Live Solution Center for assistance.

    Windows Live Solution Center: http://windowslivehelp.com/product.aspx?productid=10

    For more information, see the following articles:

    http://support.Xbox.com/en-us/Xbox-Live/how-to/Xbox-Live-account-management/home

    http://support.Xbox.com/en-us/Xbox-Live/how-to/Xbox-Live-account-management/manage-Live-ID

    Hope the information is useful.

  • my hotmail account has been blocked due to unauthorized access and I get no answers to the recovery information I supply__

    my hotmail account has been blocked for almost 2 weeks due to unauthorized access and I get no answers to the recovery information that I supply

    Hello

    This forum deals with aspects of electronic mail on your computer network.

    If the problem related to the Live mail Server, or configure the features of the software, you'll do better by logging and displaying the question on Live Mail support forum.

    My moderator tools cannot transfer messages on the forums of Windows,

    Please re - ask your question on the Forum Windows Live,

    The home page of Windows Live Support
    http://windowslivehelp.com/

    Hotmail Forum

    http://windowslivehelp.com/forums.aspx?ProductID=1

    Jack - Microsoft MVP, Windows networking. WWW.EZLAN.NET

  • ORA-20001: unauthorized access (package for the undefined security group variable).

    I'm creating an application that uses the authentication of the APEX and characteristics (work) registration and forgot password forms (does not work).

    My I forgot the password is public (requires authentication). The user provides the user name and a secret answer, which are validated and then provides the new password. I try to use htmldb_util.reset_pw to reset the password of the user, but it does not work.

    I have a process on the new password page call a PL/SQL anonymous block that looks like this (see below), where username = P16_ITEM1 and P18_ITEM1 = new password.

    BEGIN
    apex_040000.htmldb_util.reset_pw (V ('P16_ITEM1'), V ('P18_ITEM1'));
    END;

    I don't know how to send a message of success/failure of such PL/SQL block to the APEX, but that's a separate issue, I guess.

    In any case, during the trial through SQL Developer as the user with APEX_ADMINISTRATOR_ROLE, I get the following error:

    ORA-20001: unauthorized access (package for the undefined security group variable).
    ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 22
    ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 1220
    ORA-06512: at "APEX_040000.HTMLDB_UTIL", line 1253
    ORA-06512: at line 8 level

    I've searched previous discussions and tried different suggestions with no luck.

    I'm on Oracle DB 11g XE and APEX 4.x.

    Any help will be appreciated. Thank you

    Alex.

    In any case, during the trial through SQL Developer as the user with APEX_ADMINISTRATOR_ROLE, I get the following error:

    ORA-20001: unauthorized access (package for the undefined security group variable).

    When executing code outside the Apex which depends on the security defined Apex group, perform the following steps before your own code:

    wwv_flow_api.set_security_group_id(apex_util.find_security_group_id('YOUR_SCHEMA_NAME'));
    

    Google "wwv_flow_api.set_security_group_id" for more details, like this blog:

    http://www.easyapex.com/index.php?p=502

    -Morten

    http://ORA-00001.blogspot.com

  • After the upgrade to Windows 10, I was not able to access my email to Outlook Web Access. I get this message: error HTTP 401.2 - Unauthorized: access is den

    Firefox stopped 40 access Outlook Web access, a week ago. I always get the following message:

    You are not authorized to view this page
    You have no permission to view this directory or page using the credentials you provided as a Web browser sends a header field WWW-Authenticate the Web server is not configured to accept.

    Please, try the following:
    Contact the Web site administrator if you believe you should be able to view this directory or page.
    Click the Refresh button to try again with different credentials.

    Error HTTP 401.2 - Unauthorized: access is denied due to server configuration.
    Internet Information Services (IIS)

    Technical information (for support personnel)
    Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401.
    Open IIS Help, which is accessible in IIS (inetmgr) Manager and search for topics titled words of security, authentication and Custom Error Messages.

    Thank you for your help.
    Najib

    Firefox 40 change something that affects authentication: is no longer, it appears a name of user and password dialog box to prompt for credentials for embedded resources if they are hosted on a different server. These can include a framed page, an external script or an image, for example.

    If you right-click on the error page, "This frame" appears on the menu? If so, who might follow and Open Frame in a new tab to see if it is hosted on a different server? If you reload the page without frame, it works normally?

    If you are unable to work around the problem by unframing page, you can undo the change as follows. Of course, please be wary of this guest appearing on other sites where it can be to get you to reveal your credentials to another site.

    (1) in a new tab, type or paste Subject: config in the address bar and press enter/return. Click on the button promising to be careful.

    (2) in the search above the list box, type or paste auth and make a pause so that the list is filtered

    (3) double-click the preference of network.auth.allow - subresource-auth and edit the 1 to 2, and then click OK

    • 1 shows the dialog box logon only for pages framed, images, etc., hosted on the same site
    • 2 allows the connection to pages dialog box framed, images, etc., hosted on any site

    -What changes anything with your OWA server? If not, you can restore its default value definition; It must be something else.

  • How can I stop Panda Cloud Antivirus is blocking my access to NAB

    How can I avoid that Panda Cloud Antivirus is blocking my access to my National Australian bank account?

    Hello

    I would suggest you read the following article and see if it helps the access to certain Web sites is blocked with Panda Cloud Internet Protection

    http://www.pandasecurity.com/enterprise/support/card?ID=90808&idIdioma=2

    If the problem persists please contact Panda Cloud Antivirus support so that they can help you

    Warning: Using third-party software, including hardware drivers can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the use of third-party software can be solved. Software using third party is at your own risk.

  • How can I allow one of my children to use local applications, while temporarily blocking his access to the Internet and while allowing children to continue to access the Internet?

    I have three children who have separate user accounts on our two computers. Both computers running Windows 7 Home Premium edition. We use Windows Live Family Safety on each computer to our parental controls for defining when and what each child can access. We used the period of parental control feature to block every child signed to computers, except when we allow. (It would be nice if we could block a computer and allow them to use the other.)

    However, I can't find a way to allow a child to not use the computer for local activities (for example, Microsoft Word), while blocking its access to the Internet. I also want to allow his brothers to continue to use the Internet during this time.

    Any help would be appreciated. Thank you.

    Hello

    Windows parental control have no option to directly block access to the internet in a Windows user account, because the system needs to provide activity reports. To work around the problem, you can block all internet browsers available for this user account so that the child have no way to access the internet. Restriction of the app to access the control that installed programs on the computer children.  Here are the detailed steps to block some apps:

    1. on any computer, log on to the parent account for http://fss.live.com

    2. click Edit settings under the name of the child you want to change the settings and then click the App restrictions.

    3. check the circle next to turn on the restrictions of the app.

    4. check all programs related to access to the internet or type the application in the area of Search apps .

    5. check the box next to the application or the program once it appears in the list.

    6. click on Save.

    This settings apply only to that specific user account. If you have any other questions, please let us know.

    Thank you!

  • How can I block others access to my wireless router?

    I have performance slow and even lose connections.  I have Comcast and they have suggested that it is 'noisy' of what they see on their end.  The technology said that he receives many complaints from users of wireless router.

    Hello

    Quote: "How can I block others access to my wireless router?

    By setting up the wireless router security encryption.

    Of the weaker for wireless security, more strong capacity is.

    No security
    Switch Off SSID (even has No Security. SSID can be sniffed easily even if it is turned off)
    MAC Filtering___ (Band Aid if nothing else is available, MAC number can be easily Spoofed).
    WEP64___ (Easy, "Break" by knowledgeable people).
    WEP128___ (a little more difficult to activate, but "Piraté" too).

    -------------------
    The three above are not considered safe.
    Safe starts here at WPA.
    -------------------

    WPA-PSK__(Very Hard to Break).

    WPA-AES__(Not functionally Breakable)

    WPA2___ (not functionally breakable).

    Note 1: WPA - AES the current interpretation level entry of WPA2.

    Note 2: If you use WinXP SP3 bellows and not updated, you need to download
    the WPA2 Microsoft's fix.

    Documentation of your devices (router wireless and computer wireless card) must indicate the type of security that is available with your wireless hardware.

    All devices MUST be set to the same level of security using the same password.
    Therefore, security must be set according to what is the best possible one of the wireless devices.

    I.e. even if most of your system may be able to be configured to the maximum with WPA2, but a device is able to be configured for maximum of the WEP Protocol, to the whole system must be configured to WEP.

    If you need more security and a device (such as a wireless card that can only do WEP) is now better security for the entire network, replace with a better device.

  • How to block internet access to users on the local computer. The machine is sub domain control.

    How to block internet access to users on the local computer and the machine is in sub domain control.

    Hello

    Thanks for posting your query in Microsoft Community.

    Your question is beyond the scope of what is generally answered in this forum of consumer and would be better suited for the IT Pro TechNet public.

    Please post your question in the TechNet Forums.

  • BlackBerry 10 blocking internet access to applications and only the read permission

    Hello, I was just wondering if there is anyway to block Internet access for an application? And if there is such a framework to allow only read access to files/text/emails for app?

    Thank you

    Unfortunately, you can't do that for specific applications.

  • Block internet access on a per client basis

    Seems like such a simple question, but I cannot quite do things. The firewall is 1760 with IOS 12.3. I'm trying to block internet access for a specific internal ip address, but no matter how create the access list seems to block internet access for all machines. Argh.

    I have attached a clean version of the config file in the case that is needed.

    The last thing I tried was:

    access-list 101 deny ip 10.10.10.95 0.0.0.0 0.0.0.0 255.255.255.255

    Interface FastEthernet0/0

    IP access-group 101 out

    This has blocked all net access for all internal machines.

    Help! :)

    Hi Paul,.

    Do not use your Joker or your access list. Implement as shown below.

    access-list 101 deny host ip 10.10.10.95 all

    access list 101 ip allow a whole

    You can also apply the access list to the Vlan1 interface as is the first interface that meets your LAN traffic.

    interface Vlan1

    IP access-group 101 in

    or

    interface FastEthernet0/0

    IP access-group 101 out

    HTH

    MAR

  • Adobe Reader is blocking internet access to a file. How to enable?

    Adobe Reader is blocking internet access to a file. How to enable?

    Edit-> preferences-> trust manager-> access PDF files outside of the web browser Internet-> settings

    Unlock Amazon.com in this screen.

  • transfer of data from access to oracle through ODBC

    I plan to create a data warehouse.

    I transfer an access to oracle table using ODBC. structure of the access table is below.

    dw.JPGn

    When I opened the session table in oracle hour start and end changed to 30-dec-99, could you please help me how to display time of beginning and end of column value

    dw2.JPG

    Sorry, but this is the forum for data retrieval. Try to find a forum for ODBC or go on the forum of the General database.

  • I have been a member of the CC, but had to leave for financial reasons. I have re installed my old version of CS6, but I get a pop up blocking my access to the program and telling me to renew my membership. What can I do?

    I have been a member of the CC, but had to leave for financial reasons. I have re installed my old version of CS6, but I get a pop up blocking my access to the program and telling me to renew my membership. What can I do?

    You are right!

    Try to uninstall the full CS6 using Adobe - Adobe CS5 Clean Tool and then install it via applications download Creative Suite 6

    Hope that helps!

  • Conversion of query MS Access to Oracle

    Hello

    With the help of Oracle 11 g.

    I need to convert query MS Access to Oracle:

    UPDATE AR2000_CREDITS_DEBITS INNER JOIN (APPROVED_CREDITS_DEBITS INNER JOIN CREDIT_DEBIT_TYPE ON APPROVED_CREDITS_DEBITS. CREDIT_DEBIT_TYPE = CREDIT_DEBIT_TYPE. CREDIT_DEBIT_TYPE)

    ON AR2000_CREDITS_DEBITS. CREDIT_DEBIT_ID = APPROVED_CREDITS_DEBITS. CREDIT_DEBIT_ID AND

    AR2000_CREDITS_DEBITS. OBLIGATION_SUB_ACCOUNT = APPROVED_CREDITS_DEBITS. SUB_ACCOUNT)

    SET

    AR2000_CREDITS_DEBITS. CLASSIFICATION_CODE = 'X ',.

    AR2000_CREDITS_DEBITS.comments = 'PB - all fields. "

    WHERE

    AR2000_CREDITS_DEBITS. CLASSIFICATION_CODE is null

    AND AR2000_CREDITS_DEBITS. BASE_AMOUNT = BEFORE_TAX_AMOUNT

    AND LAST_SIGNED_DATE = OBLIGATION_DATE

    AND AR2000_CREDITS_DEBITS.GL_DISTRIBUTION_CODE not Like '% SMB.

    Thank you

    M.R.

    You are not viewing the details of your tables so we do not know where the

    BEFORE_TAX_AMOUNT, LAST_SIGNED_DATE, or OBLIGATION_DATE owned or what relationships are exactly.

    You'll probably look at something on these lines:

    Update arcd ar2000_credit_debits

    Set classification_code = 'X ',.

    Comments = "PB - all fields."

    where classification_code is null

    and gl_distribution_code not like '% SMB.

    and (base_amount, last_signed_date)

    in (select before_tax_amount, obligation_date

    of acd approved_credit_debits

    Join credit_debit_type cdt on (acd.credit_debit_type = cdt.credit_debit_type)

    where arcd.credit_debit_id = acd.credit_debit_id

    and arcd.obligation_sub_account = acd.sub_account

    )

    Although I doubt that it works because it is (there certainly not tested), and we need all the information on the tables and relationships first.

Maybe you are looking for

  • Access MY music via iCloud/Apple music on my Mac

    I recently joined Apple music in part because I'm tired of using an external hard drive. I have all my music uploaded to the iCloud and it works very well on my phone. However, I can't seem to access my music on my computer (a Macbook Air if it matte

  • Thin PC without Audio

    I have a lot of Hp dx2000mt towers I put embeded Thin PC from Microsoft, Windows 7 on. I have no sound on these machines, when before with XP I had audio. I downloaded the latest audio drivers I know a Slimdrivers free program. I tried to use HP driv

  • Audio input level set manually on t5i

    First post here. I just started working with my new t5i, which I use to work on my current video tutorial series. In the manual, I see how it is possible to set the maually of audio input for an external microphone level, but I can't understand how t

  • Used to install Vista SP2. error code 800705b 3 error_requires_interactive_windowstation

    I now tried installing Vista sp2 several times and get the above error message. I have Windows Vista Home premium 32-bit with Service Pack 1. I use Google Chrome as a browser and Kaspersky Internet security as a security suite. I have a Dell Dimensio

  • after update of Marshmallow

    after update to the Marshmallow, my lenovo A7000 stop ringing when someone calls me, I can't hear my phone can any of a kelp me