Home » RDBMS Server » Security » Connect with special application to DB.
Connect with special application to DB. [message #120445] Thu, 19 May 2005 16:22
wejder
Messages: 7
Registered: May 2005
Location: Warsaw
Junior Member
in my www application based on oracle 9i users connecting with db users accounts.

they connecting through WWW ( apache ).

but when someone will inquire SID of database ( user, pass just has )
will can connect with toad, odbc, ms access and any other apps and that is unacceptable.

i wrote some on logon trigger which recognize application, user and ip and i can lock that user on logon but when someone change access.exe to 123.exe he will in db.

what should i take note yet ? ( besides roles in db )

[Updated on: Thu, 19 May 2005 16:23]

Report message to a moderator

Previous Topic: Password Exipies soon..
Next Topic: Restrict Oracle access by User and IP Address
Goto Forum:
  


Current Time: Thu Mar 28 15:49:36 CDT 2024