Or ... If I can add to Justin's idea... Make the password function only work if the user doing the changing is the dba, so you don't have to enable / disable it. IE IF user = 'DBA' then .... else raise; end if; Babette Turner-Underwood work: babette.turnerunderwood@xxxxxxxxxxxxxxx home: babette@xxxxxxxxxx 954-3752 (Mon - Fri 7am - 3pm) -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Justin Cave (DDBC) Sent: 2004-03-22 2:19 PM To: oracle-l@xxxxxxxxxxxxx Subject: RE: User passwords Can you create a password complexity function that always indicates that the new password fails for this user? The DBA could then remove the password complexity function when it was time to change the password. Justin Cave Distributed Database Consulting, Inc. http://www.ddbcinc.com/askDDBC -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Denise.Rossette@xxxxxxxxxxxxxxxxxx Sent: Monday, March 22, 2004 11:55 AM To: oracle-l@xxxxxxxxxxxxx Subject: User passwords List: We have a user "viewer" account for an internal application. We want to make sure that no one can change the password of this account even if they are signed on as that account - because it will obviously affect others using the internal application. We only want a DBA account to be able to change this user's password. I realize all of the security issues with the set-up as it is, but that's what I have to work with now. I have researched several Oracle manuals and looked into using Oracle Label Security and product_user_profile. Metalink support does not have a solution for this issue. There seems to be many ways to have users change their passwords and to force complexity of their passwords - but no way to stop them from changing the password. Is there a solution within Oracle? Has anyone else faced an issue like this or am I dealing with a "unique and unusual problem"? Thanks to all... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Denise Rossette Southwest Florida Water Management District 2379 Broad Street Brooksville, Florida 34604-6899 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Email: denise.rossette@xxxxxxxxxxxxxxxxxx ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put 'unsubscribe' in the subject line. -- Archives are at //www.freelists.org/archives/oracle-l/ FAQ is at //www.freelists.org/help/fom-serve/cache/1.html ----------------------------------------------------------------- ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put 'unsubscribe' in the subject line. -- Archives are at //www.freelists.org/archives/oracle-l/ FAQ is at //www.freelists.org/help/fom-serve/cache/1.html ----------------------------------------------------------------- ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put 'unsubscribe' in the subject line. -- Archives are at //www.freelists.org/archives/oracle-l/ FAQ is at //www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------