Re: Prevent certain users logging on during specific hours
- From: Biju Thomas <biju.thomas@xxxxxxxxx>
- To: mcunningham@xxxxxxxxxxxxxx
- Date: Thu, 24 Apr 2014 11:14:15 -0500
We have something similar requirement on one of the databases. We assigned
the restricted users to a specific profile, and created a logon trigger to
match the current time and profile. If the login time is between the
restricted window, these users are shown appropriate error message at login
time. Also, there is a job to terminate the sessions of users with this
profile at the start of the restricted window (to prevent users login
before the window and stay connected). .
~Biju
On Thu, Apr 24, 2014 at 11:05 AM, Cunningham, Mike <
mcunningham@xxxxxxxxxxxxxx> wrote:
> John, we use a process as mentioned before – shutting down a listener.
> We have more than one listener and we shutdown the **general** listener
> during certain periods and disconnect the users who should not be connected
> at that time. This is sufficient for our needs. However, a savvy person
> could figure out other available listeners and connect. Depending on the
> level of security required this may or may not meet your needs.
>
>
>
> *Michael Cunningham*
> *Senior Database Administrator*
> *The Doctors' Company*
> 707.226.0221 - desk
> 707.337.0184 - cell
>
>
>
> *From:* oracle-l-bounce@xxxxxxxxxxxxx [mailto:
> oracle-l-bounce@xxxxxxxxxxxxx] *On Behalf Of *John Hallas
> *Sent:* Thursday, April 24, 2014 3:47 AM
> *To:* 'Ethan Post'
> *Cc:* oracle-l@xxxxxxxxxxxxx
> *Subject:* RE: Prevent certain users logging on during specific hours
>
>
>
> It is around a security restriction and I cannot be more specific than
> that. It is a precautionary measure as users could do what they need during
> legitimately allowed access periods
>
> No matter how good your monitoring and alerting is there is always a
> delay whereas if you stop access first you don’t need to monitor and alert
> (for that specific issue of course)
>
>
>
> John
>
>
>
> *From:* Ethan Post [mailto:post.ethan@xxxxxxxxx <post.ethan@xxxxxxxxx>]
> *Sent:* 24 April 2014 08:29
> *To:* John Hallas
> *Cc:* oracle-l@xxxxxxxxxxxxx
> *Subject:* Re: Prevent certain users logging on during specific hours
>
>
>
> John,
>
> Sorry to be a pain, but instead of answering your question can I ask one
> instead? Who are these users? Are they really a problem and if so what is
> the problem you have identified? My preference is always to give everyone
> as much hassle free access to my databases as possible. I have plenty of
> monitoring and alerting in place for the trouble makers. Just wondering,
> perhaps there is a better solution than locking out users here.
>
> Thanks,
> Ethan
>
>
>
> On Wed, Apr 23, 2014 at 1:42 AM, John Hallas <
> John.Hallas@xxxxxxxxxxxxxxxxxx> wrote:
>
> We have a requirement to prevent database logons by specific users (who
> can be identified because they have a particular role) during certain times
> and I am thinking of options and looking for any other thoughts on the best
> approach. These are some of my thoughts
>
>
>
>
>
>
> ______________________________________________________________________
> Wm Morrison Supermarkets Plc is registered in England with number 358949.
> The registered office of the company is situated at Gain Lane, Bradford,
> West Yorkshire BD3 7DL. This email and any attachments are intended for the
> addressee(s) only and may be confidential.
>
> If you are not the intended recipient, please inform the sender by
> replying to the email that you have received in error and then destroy the
> email.
> If you are not the intended recipient, you must not use, disclose, copy or
> rely on the email or its attachments in any way.
>
> This email does not constitute a contract in writing for the purposes of
> the Law of Property (Miscellaneous Provisions) Act 1989.
>
> Our Standard Terms and Conditions of Purchase, as may be amended from time
> to time, apply to any contract that we enter into. The current version of
> our Standard Terms and Conditions of Purchase is available at:
> http://www.morrisons.co.uk/gscop
>
> Although we have taken steps to ensure the email and its attachments are
> virus-free, we cannot guarantee this or accept any responsibility,
> and it is the responsibility of recipients to carry out their own virus
> checks.
> ______________________________________________________________________
>
>
>
> *Confidentiality Notice*: This message and any attachments hereto may
> contain confidential and privileged communications or information and/or
> attorney client communications or work-product protected by law. The
> information contained herein is transmitted for the sole use of the
> intended recipient(s). If you are not the intended recipient or designated
> agent of the recipient of such information, you are hereby notified that
> any use, dissemination, copying or retention of this e-mail or the
> information contained herein is strictly prohibited and may subject you to
> penalties under federal and/or state law. If you received this e-mail in
> error, please notify the sender immediately and permanently delete this
> e-mail.
>
Other related posts:
