Prevent the owner of the schema using development tools

Hello world

We are doing some tasks to meet the PCI DSS requirements. One of them is preventing the schema owner to log in using development tools (TOAD, sqlplus, plsqldev, SQL Developer...). I found a solution here:

http://kamranagayev.com/2009/10/04/block-developers-from-using-Toad-and-other-tools-on-production-databases/

But as comment said, if we change the name of the .exe file, we can easily connect. I thought to do info = module, no program info. I tried with no success. I read somewhere that in after logon, the client info trigger is not set completely. So that we can't get info module exactly after logon trigger (I tried and I have seen this module was same as program interviewed since the session$ v).

Another comment suggested that we allow some programs to connect instead of refuse many unauthorized tools. I think it is a good idea. But I wonder if some guys know rename tool dev as our authorized tools and it can connect.

If anyone has any ideas or solutions, please help me. Thank you.

One solution is to use two schemas - detail a. has no privs assigned to it (not even CREATE SESSION), but contains all of the objects (tables, indexes, views, code, etc.). Diagram B does not all objects, but given privileges to operate on the objects belongs to priv a. withdrawal CREATE SESSION from scheme a scheme b (in for example Prod) will achieve your requirement.

Tags: Database

Similar Questions

  • Size of the schema and the schema used provided actual spending

    Hello

    Can you please provide me with the query that is used to see the actual size of the schema and the schema used provided.

    I got the sqlquery to see the used size of the schema (select owner, sum (bytes) / 1024/1024 "MB" dba_segments group by owner;).

    Please give me the sqlquery to see the actual size of the schema

    Does

    SQL> select username,tablespace_name,bytes,max_bytes from dba_ts_quotas order by 1,2;
    

    Help?

  • Cannot save the schema using the client - crashes ' start record contour.

    All,

    I use version 9.3.1 (yes I know we should be upgraded) and EAS installed on my machine (not web-based version).  For some reason, my computer crashed last week so I had to reinstall EAS.  After I did, I started having the problem of not being able to save a scheme and it gets stuck on the "start record sketch."

    It is not a java problem, that I'm not using the web browser.  In addition, a colleague has the same version of java and isn't in trouble. Also, I got this version of java (1.6) on my machine for months.

    Any ideas.

    Thank you

    Check: Cannot save the schema with Essbase Administration Services and Version Java JRE 1.6 (Doc ID 847487.1)

    It indicates that the client computer does not have the supported JRE versions.

  • Identify the schema using sys_context (' USERENV', 'CURRENT_SCHEMA' ")

    DB version: 10.2.0.4

    I am trying to create a trigger that will follow all DDL in a particular schema.
    But the relaxation below does not seem to work. Don't know if
    ('USERENV', 'CURRENT_SCHEMA') 
    is the right way to identify the schema where the DDL has occurred.
    create or replace trigger sys.mytest_trg after ddl on database
    declare
    v_sch_name varchar2(350);
    begin
    
    SELECT sys_context('USERENV', 'CURRENT_SCHEMA') into v_sch_name FROM dual;
    
    if v_sch_name = 'PRODSCHEMA'
    then
    --insert into SCOTT.test21 values (v_sch_name);
    --commit;
    dbms_output.put_line ('You just performed a DDL in PRODSCHEMA');
    end if;
    
    end mytest_trg;
    /

    Why not simply refers to ora_dict_obj_owner?

    Refer to the documentation:
    http://download.Oracle.com/docs/CD/B10501_01/AppDev.920/a96590/adg14evt.htm

  • Show all members of the Group of developer tools?

    How can I view all of the current members of the developer tools group?

    Hello Michael,

    Unfortunately, it is quite difficult. Here are some solutions:

    http://superuser.com/questions/279891/list-all-members-of-a-group-Mac-OS-x

    https://jamfnation.jamfsoftware.com/discussion.html?ID=15503

  • The 11g using uninstall tool to remove the old binary files?

    Hi all

    I know that with 11g, the preferred method for deleting old binary files is to use the uninstall tool (in/deinstall/of-install $11G_HOME). However, is it possible for me to remove the old binary files using this tool?

    For example, my 11g ORACLE_HOME (that is to say that I want to keep and use) is /opt/oracle/product/11.2.0.3/db

    And I have the following binary files on a particular database server:

    Oracle@myserver:/opt/Oracle/product > ls

    10.2 11.1 8.1.6.2 8.1.7.1 8.1.7.4 9.0.1.0 9.2.0.2 9.2.0.5 agent
    10.2.0.3 11.2.0.3 8.1.7.0 8.1.7.3 8.1.7.4.32 9.0.1.1 9.2.0.4 9.2.0.6

    As you can see, I have binary files dating back to before the beginning of time (8.1.6, nice) and I wish I could clean it carefully.

    I tried to uninstall (just under the checkonly, to ensure that it "sees" the old house) 10.2 binaries using the 11 g uninstall tool and got the following error:

    /opt/Oracle/product/11.2.0.3/DB/deinstall/deinstall-Accueil /opt/oracle/product/10.2/db - checkonly
    Verification of the required files must be treated and...
    Please wait...

    ERROR:-House does not have to be defined for a deinstall linking in an ORACLE_HOME.
    Uninstalling the current House is supposed to.

    Any thoughts? I absolutely don't want to uninstall the current home!

    Mark

    If you want to get rid of the old the ORACLE_HOME, then you must use the corresponding version of uninstall and must be run from the ORACLE_HOME.

    The best way to remove the ORACLE_HOME is to deattaching the old ORACLE_HOME with inventroy and remove this old House.

    /oui/bin/detachHome.sh
    
  • Sort descending using development tools Dimension

    Hello

    I have an alpha-numeric property to short, we do descending sorting, can achieve us using developer studio.

    I was able to sort in ascending order, do not see any field in developer studio to sort by descending order

    Thank you
    Tijo

    Hi Michael,

    If you want to sort descending dimension a way to do is to add more in 'appname.refinement_config.xml '.



    In this way, we get the dimension values in descending order.

    Note Please Whenever you have the pipeline in the developer studio this mapping is deleted, you must add it again before running the base line.

    HTH
    MS

  • Tables of export and import the schema using the system user

    Hello

    Can someone asssit me please:

    I want to export all the tables / or some tables of a schema (ETLUSER) on DB1 to ETLUSER on an other (DB2) database by using the user of the SYSTEM. The SYSTEM user has DBA privilege.
    How I do what I do not know the password of ETLUSER.

    Environment:
    Oracle 11 g 2, AIX5

    Thank you.

    no problem, shouldn't you password in the ETLUSER.
    Start your exp or imp of the user of the system

    below, scott table dept exported and imported in the HR schema.

    Oracle@oragg1 > exp tables = scott.dept file = a.dmp log = b.log

    Export: Release 10.2.0.4.0 - Production on Mon Mar 19 18:58:45 2012

    Copyright (c) 1982, 2007, Oracle. All rights reserved.

    Username: System
    Password:

    Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - Production 64-bit
    With the partitioning, Real Application Clusters, OLAP, data mining
    and Real Application Testing options
    Export in US7ASCII and AL16UTF16 NCHAR character set
    Server uses WE8ISO8859P1 (possible character set conversion) character set

    About to export specified tables by conventional means...
    Current user has changed to SCOTT
    . . export the DEPT 10 exported table rows

    Oracle@oragg1 > imp leader = a.dmp log = bb.log fromuser = scott touser = hr

    Import: Release 10.2.0.4.0 - Production on Mon Mar 19 18:58:56 2012

    Copyright (c) 1982, 2007, Oracle. All rights reserved.

    Username: System
    Password:

    Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - Production 64-bit
    With the partitioning, Real Application Clusters, OLAP, data mining
    and Real Application Testing options

    Export file created by EXPORT: V10.02.01 by conventional means
    import in US7ASCII and AL16UTF16 NCHAR character set
    import server uses WE8ISO8859P1 (possible character set conversion) character set
    *. import of SCOTT in HR objects *. .
    "DEPT" table import 10 lines imported
    Import completed successfully without warnings.

  • Register xmltype column of a table in the schema using DBMS_registerschema

    I try to do the following:
    BEGIN
    DBMS_XMLSCHEMA.registerSchema
    (SCHEMAURL = > 'CCD.xsd',)
    SCHEMADOC = > xdbURIType (select SANDBOX. XHOLDER. SYS_NC_ROWINFO$ sandbox. XHOLDER) .getClob)
    );
    END;

    But he does not have a select statement where she is waiting for a. I can't find anything to do what I'm trying to do. Anyone with ideas?

    Thanks TONS!
    DECLARE
      XMLSCHEMA XMLTYPE;
    BEGIN
      select OBJECT_VALUE
         into XMLSCHEMA
        from SANDBOX.XHOLDER ;
    
       DBMS_XMLSCHEMA.registerSchema(SCHEMAURL => 'CCD.xsd', SCHEMADOC => XMLSCHEMA);
    END;
    

    Published by: mdrake on 25 Sep, 2009 10:52

    Published by: mdrake on 25 Sep, 2009 10:53

  • question on the pl/sql developer tool

    Hello

    I'm trying to debug a package by using pl/sql developer. It looks good, but the variable defined in the package do not display their value even in the mode debug to see what they have in this particular instance.

    How to get there?
    Thank you.
    KK

    Hello

    As HOEK has suggested... Please, go to the tool menu... preferences... under Oracle... debugger...

    You can see three text boxes... never... always... never. first check... button display the values of variables in a popup.

    Please enable this option... debug it...

    Concerning
    KPR

  • Impossible to update to a newer version of the DPS using CS6 tools

    When I connect the DPS Folio Builder told him that I need to upgrade to a newer version. The computer has DPS 8.0.0.24 tools. When I look for updates in the application manager are not everything. Update to CC is not possible at this time.

    My current version of ID is 8.0, and my MAC version 10.6.8

    When I try to manually install the updates for the tools DPS I get this error

    Office DPS CS6 32.0.0 tools updated

    Update is not applicable. Error code: U44M2P28


    I don't know what to do, I could not find all the solutions in the forums. Thank you!!

    You need to update to OS X. The minimum version for DPS running on CS6 is 10.7.

  • How to identify the siebel custom index created from DB without using siebel tools

    Dear Experts,

    Please let us know how to identify siebel custom indexes that are created directly through DB. We don't are not sure on the customer tables had created indexes.

    Thank you

    Carine Ch

    Hello carine,.

    Thank you for using Oracle communities.

    Custom indexes created without using Siebel tools are not included in the schema definition in the Siebel Repository.

    Just for your information, these indexes are deleted during the upgrade of database. In order to preserve these indexes, add them to the repository Siebel using Siebel Tools.

    Now come to your query you have utility DBCHCK.

    DBCHCK is that Siebel provided utility to compare the logical schema in the Siebel Repository against objects in the physical Oracle database.

    DBCHCK must be run regularly to check the status of the Siebel business, especially after a release.

    DBCHCK can be useful to identify custom index added by the development team, but not added to the repository using Siebel tools.

    You can run it from a server in the environment. A performance by connection to the base. This should be run from the folder siebsrvr

    You can get more information from document following knowledge.

    How the Dictutl and the dbchck to run? (Doc ID 475677.1)

    I hope it helps.

    Best regards

    Chetan

    P.S. If one of the answers was correct or useful, it would be great if you can mark as appropriate help the other identified correctly updated.

  • Characters not visible (caused by hitting the bar space or TAB in PL/SQL developer tool) causing slow running query? and database with low performance?

    Hi all

    I need your help to get this issue resolved its urgent and I'm not able to get to the conclusion. Here is my scenario, I'm getting slow query runs because of some non-visible characters that are copied with the application of the PL/SQL developer tool. Please find below attached screenshot: Oracle_Issue

    Oracle_Isssue.png

    Note: This non-visible characters are caused when we write the query then us hit the SPACEBAR or press TAB PL/SQL developer tool

    I use the developer tool PL/SQL to write or test the query. Now I take this request copy paste in my application of the company (who takes this query connects to Oracle or any source of data base, catch data and produce PDF reports for customers).

    Now, my client is the Oracle user when I write and you run this query by the PL/SQL Developer, it works fine, but when I paste in my Inbox feature request (reporting system) and run it, it runs slower and jams to the customer database. Now after a little research I found that when I copy the query directly from PL/SQL developer at my request, he copy some characters not visible (introduced when we press SPACE or TAB in PL/SQL developer tool when writing query) with the request, then I copy this query again to my box of the application Notepad and delete these non-visible characters. Now, after removing the non-visible characters again once I copy backup question in my application and run the query, it works normally. Please find below attached screenshot: Oracle_Issue 2

    Oracle_Isssue_2.png

    So I think that the cause of slow performance is due to some INVISIBLE CHARACTERS present in the query.

    My application uses SQL server 2008-2012 at the backend to store data from different sources.

    Character set used: SQL_Latin1_General_CP1_CI_AS


    To write and test queries: PL/SQL developer tool

    My Client use Oracle 11 g

    Character set used: Normal character: NLS_CHARACTER: AL16UTF16

    National Characeter: NLS_NCHAR_CHARACTER: WE8WIN1521

    I just wanted to know the blocking process to the top of the database and the characters not visible how affecting slow running query of query database.

    Please let me know if I'm missing something or you need more information on this issue.

    Thanks in advance,

    HP

    Simple answer. No.

    Spaces and line breaks do not change the execution plan created. Does not plan to run slower or faster.

  • Tronque() prevents the database index. It will also make Last_day?

    Hi all

    ADDM tells me that an index is not used because I use TRUNC on a column where dates are stored in.
    I wonder if LAST_DAY is better for this?

    Concerning
    Marco

    Any function, when applied to an indexed column, will prevent the Oracle using an index on that column. There any function, even if there is 'no operation' (column_name + 0).

    You can create a function TRUNC (column_name)-based index that could be used if your query uses the TRUNC function. Or, assuming you compare the column to a value of bind, you can modify your query so that the function is not necessary. For example, rather than

    SELECT *
      FROM some_table
     WHERE TRUNC( some_date_column ) = date '2009-12-08'
    
    you could use
    
    SELECT *
      FROM some_table
     WHERE some_date_column >= date '2009-12-08'
       AND some_date_column < date '2009-12-09'
    

    Justin

  • Space forum reports moved to development tools, but not displayed in the list area

    It's a good idea to move the area report in the category of development tools, but it is not among the list of namespaces

    Development tools

    You must choose the sub-areas to see

    Development tools

    Shoudn't I see it at the same level as the forms?

    Concerning

    Marcus

    Thanks for the heads up! I added registration space.

Maybe you are looking for