Can I block SQL PLUS (inserts, updates, deletes, drop, etc)?

Let's say I make a forms or reports builder module, and I would like to avoid that any user alter a table by using SQL code.
(regarless I use a different user/pass)
is it possible?

Ronald
If im correct is your requirement like this ?
You want to avoid a user using SQL and running script to alter the table structure when you
have your form or report module is already built.
If my understanding to ur req is correct then you can avoid this by using the
PRODUCT_USER_PROFILE. there you can restrict the user to use only mentioned modules.
You can allow the user to use only FORMS, REPORTS and disallow the user to connect the database by any other means.
Also you can achieve this by creating a trigger at the schema level and check whether the product/application he is using to access the database is other than FORMS,REPORTS and raising an error
message.
If your requirement is just only for the data then you can achieve this same also using the similar triggers.
try that
all the best
prakash
[email protected]

Similar Messages

How to find out who made inserts/updates/deletes made to a SQL Table

I want to know WHO MAKES INSERTS/UPDATES/DELETES TO a particular SQL Table. Bascially I want to AUDIT ANY Edites made to a SQL 2008 TABLE. I need info such as WHO AMDE THE Updates i.e. the user first/lastname, When update was made, what row was updated etc...How
can I do that with SQL 2008?

One way to achieve that would be to use triggers to detect when a change is made to the table, and then insert a record into another table/database detailing what changed and who by.
You'd need three triggers, one for insert, update and delete respectively, and for each of those you use the "inserted" and "deleted" tables (system tables maintained by SQL) to retrieve what has been done. To retrieve who made the change you can query IDENT_CURRENT
which returns the last identity value for a specific table.
See :
Triggers -
http://msdn.microsoft.com/en-gb/library/ms189799(v=sql.100).aspx
Inserted & deleted tables -
http://technet.microsoft.com/en-us/library/ms191300(v=sql.100).aspx
INDENT_CURRENT -
http://technet.microsoft.com/en-us/library/ms175098(v=sql.100).aspx
There may be better / more up to date ways to do this, but I've used this method successfully in the past, albeit a long time ago (on a SQL 2000 box I think!).

As i am fresher Please share the doc of ECMA script using java script in SharePoint 2013 also how we can insert,update,delete records in list using ECMA script.

As i am fresher Please share the doc of ECMA script using java script in SharePoint 2013 step by step also how we can insert,update,delete records in list using ECMA script.
Thanks and Regards, Rangnath Mali

Hi,
According to your post, my understanding is that you want to use JavaScript to work with SharePoint list.
To create list items, we can create a ListItemCreationInformation object, set its properties, and pass it as parameter to the addItem(parameters) function
of the List object.
To set list item properties, we can use a column indexer to make an assignment, and call the update() function so that changes will take effect when you callexecuteQueryAsync(succeededCallback,
failedCallback).
And to delete a list item, call the deleteObject() function on the object.
There is an MSDN article about the details steps of this topic, you can have a look at it.
How to: Create, Update, and Delete List Items Using JavaScript
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

How can perform insert /update /delete in one single mapping.

Hi,
I want to is there any logic by which we can create 2-3 pipeline in a mappings like pipelines will work for insert / update /delete or storing soem rejected data according to conditional flag.
I tried it in a mapping but problem is that when target load order is like ins then upd then delete/reject . if new rec will come then control will pass through ins target . but if rec needs to update or delete then again control is going to ins target not update / delete target.
We have already given the all conditional flags in filter after lookup and before target .
all possibilities we checked but didnt got success.
last option is separate the mappings for insert / update/delete.....etc.
Is there any solution for this type of problem.
reply plz if any body have solutions.
---Umesh

Hi Umesh,
I understand from your query that you want to load target with insert, update and delete rows after runnng the mappping...
If you are looking for the same then you can use one of the Oracle fetures Oracle Streams: Change Data Capture.
the Url is:
http://www.oracle.com/technology/products/bi/db/10g/pdf/twp_cdc_cookbook_0206.pdf
If any other help required do reply.
Regards
Tarang Jain

Insert/Update/Delete in forms6i using Objects table in Oracle9i server

I am using Oracle 9i server and dev 6i (forms6i).
i have a form based on Object tables (including REF's items). when i try to insert update, delete the reocrd in the form, it gives error.
Insert/Update/Delete failed because of OCI_22132: hexadecimal string does not corresopond to a valid REF.
when i remove REFs items from form (not from database) then it does all functions (insert,update,delete,query).
Actually i haved used this form with Oracle 8i and it did all functions(insert,update,delete,query). i am using the same tables and types definations in Oracle 9i but it is not working.
Note: Insert, Update, Delete, or Query is not being done through forms when using REFs items. Others tools like sql*plus are performing the same actions very well.
Please help.
I will be thankful to you.
M. Faisal.

user563114,
As James (padders) told you in his reply to a similar question that you posted (Typed tables is treated in the same way as a relational table?) in the Typed tables is treated in the same way as a relational table? forum, the only way you can tell for sure is to try it out both ways, measure and compare the times.
Of-course, there are many factors that effect the time, apart from whether you use a nested table or a regular table.
Good Luck,
Avi.

Using Case statement to insert,update,delete the tables

Hi All,
I have to check the databse ,
if it is developement then
insert/update/delete values in tables;
if it staging then
insert/update/delete values in tables;
if it is production then
insert/update/delete values in tables;
thers is function available to check the current database
For doing the about i am trying to write CASE statement like this
SELECT function,
case
when fun = 'developement' then insert into table1 values ('abcd','1234')
when fun = 'staging' then insert into table1 values ('abcd','1234')
when fun= 'production' then insert into table1 values ('abcd','1234')
else null
from dual
its throughing me an error
please help
Thanks,

Hi,
You can use CASE staement any place where an expression is expected.
For example, in:
UPDATE table_a
SET     col1 = exp1
,       col2 = exp2
WHERE   exp3 = exp4;all the expressions are labled lke expn.
Note that table_a, col1 and col2 are not expressions: you must hard-code these names, or use dynamic SQL.
So it's okay to say:
UPDATE table_a
SET     col1 = CASE
                   WHEN db = 'development' THEN 0
                   WHEN db = 'staging'      THEN 1
               END
,       col2 = CASE
                   WHEN db = 'development' THEN NULL
                   WHEN db = 'staging'      THEN col2
               END
WHERE   db != 'production';In this example:
in the development database, col1 is set to 0 and col2 is set to NULL
in the staging database, col1 is set to 1 and col2 is unchanged (that is, set to what it already was)
in the production database, nothing is changed (the WHERE condition is always FALSE)

How to block Sql Plus sessions in Oracle 10g

Hi,
I want to block all sql plus sessions in oracle 10g, as we have a application and we need each and every one to use this application not the sql plus session.
Kindly update us as soon as possible. and also thanks in advanced.

Understand the concept Karl, but a layered defense seldom works in the IP world. If I manage to get through the firewall, then how can you prevent me access, at IP level, at any other ISO stack layer? If you manage to get through, then your firewall policies could just be too weak :) at least you must have some kind of an IDS infrastructure in place..
what I mean is, you can have infinite number of threats.. and this will be part of your Risk Analysis. Determining all possible threats to the assets, what are being protected and their associated value, and predicting the rate of occurrence.... with all of these you could probably come up with contingency plans and incident response.. And most of all, you should not ignore the fact that people are creative, ingenious, and curious, and they'll prove this to you by testing your security implementations. So you'll have to periodically evaluate your security.. that's why there are audits.. Also, you must balance Security, Performance, Usability, and your Budget.
Yes, you can argue that if the entire firewall goes down (thus no IP defense), then something like DBV (or even denying IPs in sqlnet) can provide some defense. But is that not then a case of too little too late? It's better too little too late, than no protection at all... Imagine if there's no DBV, or if you have not implemented the concept of "Least Privilege"? or if the backups and exports are not encrypted? That would be more devastating.. that's the importance of database security options and features in providing "defense in depth"
I question just what purpose and how effective IP packet security is at higher layers. It can never substitute doing this instead at firewall level. Well, it's not all about network security. All facets must be considered and the inter-relationships should be understand. Like the core information security and access management, physical and personnel security, training them, etc... And all of these are equally important in providing a secure ecosystem
As for security that relies on the client to pass secure data (like executable name or o/s user name)... all this can easily be spoofed. Even if the app and Oracle driver are somehow digitally signed and these signatures can be verified on the server side, we only need to look at Vista to see how secure this really would be. Microsoft attempted to encrypt every single h/w and s/w layer from the physical DVD track to the pixel on the monitor.. and this was defeated. And this was done as o/s kernel level. It is less complex to hack at driver level and even trivial to do it at application level.Security is about risk management. Blocking SQL*Plus does not negate the risk of SQL from the wild being run on a production server. For example, the client is a VB client using ODBC. It is easy to create a proxy that accepts the ODBC connection from the VB client and proxy the OCI packets to the real Oracle server. Now you have a man-in-the-middle than can inspect every single SQL call made to Oracle, and inject any PL/SQL or SQL code it wants.
Security is far beyond writing a login trigger to deny SQL*Plus sessions and calling that a defense. >
Yes I agree with you. That's why there are independent organizations and regulating bodies that provides security best practices, to give us a headstart on comming up of strong security policies.
And one of my favorites is the one provided by IASE (sponsored by Defense Information Systems Agency) where there's lot of content regarding hardening and policies
http://iase.disa.mil/stigs/stig/index.html
http://iase.disa.mil/stigs/checklist/index.html
http://iase.disa.mil/stigs/SRR/index.html
- Karl Arao
http://karlarao.wordpress.com

How to display the result of excutions(insert/update/delete rows)

Hello.
Does anyone know how to display the result of scenario executions just like a scenario executions tab of package (insert/update/delete rows) in other screen (in the intergated operating platform for operators using http)
In additional, I also like to show the hierarchy of scenario in the same view.
So, I need the query using the information of the ODI repository.
If it is possible, I also like to have the decription of the tables in the ODI repository.
Can anyone tell me how can I get the information of the counts of excution?
Thanks in advance.

Hi,
You can get that information from the API getPrevStepLog. Does it work for you?
Download the last API reference manual from:
http://www.oracle.com/technology/products/oracle-data-integrator/10.1.3/htdocs/1013_support.html#docs

Db adapter insert/update/delete output variable

Hi
How can I know how many records have been updated after an insert/update/delete operation done using the db adapter?
I was looking for an output variable to use in the invoke activity of a partnerlink created using the db adapter wizard (update operation), but seems not possible to associate an outpout variable. the update operation is a one way operation. So, what could I do to know how many records was updated?
thanks bye Paolo

The input variable specifies the records to be updated/inserted. If you count these ones, you know how many have been updated. Otherwise the Invoke will fail.
Marc

Insert , Update & Delete Not working in BDB Berkley Database

Hi,
Anybody has used Oracle ADF & BDB ,to insert/ update & delete?
imported db.jar,dbexample.jar,sqlite.jar ,derby.jar. still not working (Only Query working)
Pls lets us know

Hi,
Do you have a small test case program that demonstrates this? A JDeveloper project showing what exactly is the problem when trying to use the BDB SQL JDBC driver to insert data into the BDB SQL database? What do you mean by "not working", do you get any errors, you do not get errors but you do not see the data in the database etc?
What are the versions of Java, JDeveloper, ADF and BDB SQL you are using, and on what OS?
Regards,
Andrei

How to get last insert/update/delet row of a table?

I hava a table A and table B which is a copy of A. I want to create a trigger to record the changes of A in B. So every time inserting/updating/deleting A I record the row inserted/updated/deleted in B, But I can't find a effiencial way to get the latest row changed.
So is there any sys_var in oracle table like cur_rowid or something to record the latest inserted/updated/deleted in a table? I don't want to check a index or a table to get the max_seq_id again.

user11228816 wrote:
I hava a table A and table B which is a copy of A. I want to create a trigger to record the changes of A in B. So every time inserting/updating/deleting A I record the row inserted/updated/deleted in B, But I can't find a effiencial way to get the latest row changed.
So is there any sys_var in oracle table like cur_rowid or something to record the latest inserted/updated/deleted in a table? I don't want to check a index or a table to get the max_seq_id again.Sounds like an ugly requirement, any reason you're not going for materialized views or advanced replication here?

Concept insert,update,delete and select

hi all, i want to ask
Where I get an explanation of the concept of work process insert, update, delete and select records. From the user starts the query until accessing records the physical . or is there that can give the picture of concept process insert,update,delete and select record??

I'm not sure what are you asking here.
Are you asking how do I do these operations in a JDeveloper built application? Which technologies are you using?
Have a look at this tutorial for the basics of how to do select/update - insert and delete are two more operations you can add to your page from the data control:
http://www.oracle.com/technology/obe/obe11jdev/ps1/ria_application/developriaapplication_long.htm

How to Invoke a BPEL process when Insert/Update/Delete happens

Hi
As client requirement is we want to execute a BPEL process when there is a DML Operation (Insert/Update/Delete) on a particular table.
How do we handle this situation. Is there any alternatives if it is not possible.
Please point me if any documentaion is available.
Regards
Kiran

Hi Kiran,
What integration tool you are using.
In Oracle BPEL PM, you can create an empty BPEL process with a "receive" activity and a database adapter partnerlink which polls for change in table records every specified time interval.
After receiving the table change, you can fire the appropriate BPEL process through "invoke" activity.
thanks
Saurabh

Scenario: Insert update delete into a 3 billion target from a 2 billion source

Both target(3 billion rows) and source (2 billion rows) are SQL server tables partitioned by "Year-month". Now I want Insert update delete from source to target. This is just a scenario that I was thinking about. I was thinking about the best approach
for the load.
With my little knowledge I would write a stored procedure with Merge statement but given the large amount of data will that be the best solution?
Please advise. Thanks in advance for your help.
svk

You need to find out how much data from what dates you need to operate on.
Is it a data sync endeavor?
A few tips: forget about the Lookup, too slow, and the Cache Transform will be a burden.
I would go with the T-SQL MERGE, but may want to do it in chunks, e.g. limit to date ranges.
Arthur My Blog

Insert/Update/Delete Non-PO Invoice Line Item via FM/BAPI?

Does anyone know of a way to insert/update/delete an Invoice Line item (Non-PO Accounting Invoice - Transaction FB60 or FV60) using a BAPI or Function Module (or set of function modules) using ABAP? I have been trying to find some code to accomplish this and am stuck on a couple of issues.
I have found PRELIMINARY_POSTING_FB01 and PP_CHANGE_DOCUMENT_ENJ but both seem to submit the details to background processes. This is an issue because it gives the user a success message after execution but later delivers the error to Workflow. This is for an interfacing program so the results should be as real time as possible.
Has anyone accomplished this via FM or BAPI and if so would you mind sharing your experiences?
Thank you very much,
Andy

SG- Thank you for the reply.
I have been playing with BAPI_INCOMINGINVOICE_PARK and I'm not sure if it is doing exactly what we want, but it is something that I have considered in the past. I plan on looking into BAPI_ACC_INVOICE_RECEIPT_POST this morning, hopefully that will provide some more for us.
If possible I'd like to avoid BDC sessions because this program could hypothetically interface with multiple SAP systems with different configurations.
I will check into those FM's and thank you very much.

Can I block SQL PLUS (inserts, updates, deletes, drop, etc)?

Similar Messages

Maybe you are looking for