Database vs application users

Hi.
Please give some opinion on this:
Wich is the best approach for managing users in a typical three-tier web application, using jdbc:
A) The database has one or two users with the proper grants and privileges to manage data(eg. read_user for selects and admin_user for inserts deletes and updates) In addition, there is a table with all valid application users. The third tier will connect to the database as one of the users, depending on the system login user, via jdbc. When someone new registers on the site, a new row is added to the users table.
B) Database users are also application users. So, when someone new registers on the site, a new database user is created with the proper privileges. No need for users table because application user equals database user.
I know A and B have different security approaches, but appart from that, what are the benefits/drawbacks of each implementation ?
When is one better than the other ?
Thanks a lot.

If you see any Major/big application , username , password maintian on application level (not on database level). use DBMS_OBFUSCATION_TOOLKIT to store encrypt passwd in table.
Check following link for, How to store a password
http://asktom.oracle.com/tkyte/Misc/Passwords.html
http://www.dbazine.com/oracle/or-articles/hordila10
Cheer,
Virag Sharma
Message was edited by:
virag_sh

Similar Messages

Oracle 10g - Database does not respond to the application users

Hi all,
I am using ORACLE 10g database with 75 users connections 50 local and 20 remote users using ADSL and dial up modem. Operating system on server is
Windows 2003.
All of a sudden users making the entry get disconnected getting the error as
ORA-12516: TNS:listener could not find available handler with matching protocol stack
Other case users when using the appliaction get their PC hanged and connection
to oracle fails again. they cannot login to the application that time, the error is
ORA-04031: unable to allocate %s bytes of shared memory ("%s","%s","%s","%s")
Twice a day the users trying to login cannot access the database server.
Front end application is in VB using exe file. When the users cannot logon
to the database. I manually stop the ORACLE services(including DB console) and
then stop the listener.
This practice is going on since last two months.
Server Scenario
After Installing Oracle Standard Edition 10g.
System tablespace utilization is 98.5% which is 465 MB out of total 470 MB.
There is only one Rollback Segment named as SYSTEM.
when we install 9i 4 rollback segments as RO1, RO2, RO3, RO4 are created
by default.
Do I need to add the datafile to SYSTEM table space as its current usage is 99.15% and its auto extend is ticked on using auto extent as 10 MB. I tried adding another datafile during weekend downtime. when I resumed on saturday morning I found it did not add any datafile which I had put on thursday eveninig as system02.dbf.
Do I need to add a new datafile to the SYSTEM tablespace ?
Do I need to create new rollback segments apart from SYSTEM rollback segment ?
My current schema size 15360Mb with its usage as 9.32% (1432.25 Mb).
Please reply !!!

Hi Paul
My Server configuration is
Compaq ML 370
3.4 Ghz Processor
3.5 GB RAM
SQL> show sga
Total System Global Area 171966464 bytes
Fixed Size 787988 bytes
Variable Size 145488364 bytes
Database Buffers 25165824 bytes
Redo Buffers 524288 bytes
SQL> select * from v$sgastat;
POOL NAME BYTES
fixed_sga 787988
buffer_cache 25165824
log_buffer 524288
shared pool subheap 55600
shared pool KQR L SO 218160
shared pool KQR M PO 1329244
shared pool KQR M SO 605364
shared pool KQR S PO 164156
shared pool KQR S SO 6144
shared pool KTI-UNDO 1235304
shared pool sql area 5368208
shared pool KGLS heap 1597560
shared pool joxs heap 6004
shared pool row cache 3707272
shared pool parameters 17520
shared pool repository 19396
shared pool ASH buffers 4194304
shared pool free memory 16586072
shared pool PL/SQL DIANA 679456
shared pool KSPD key heap 4220
shared pool PL/SQL MPCODE 1167992
shared pool library cache 11368964
shared pool miscellaneous 25942980
shared pool pl/sql source 88
shared pool PLS non-lib hp 29816
shared pool XDB Schema Cac 3594144
shared pool alert threshol 3460
shared pool joxlod exec hp 355820
shared pool table definiti 5880
shared pool temporary tabl 4932
shared pool trigger defini 12848
shared pool trigger inform 1892
shared pool type object de 20256
shared pool private strands 1198080
shared pool event statistics per sess 4384640
shared pool fixed allocation callback 304
large pool free memory 8388608
java pool joxs heap 233856
java pool free memory 44743296
java pool joxlod exec hp 5354496
40 rows selected.
SQL> select segment_name, owner, status
2 from dba_rollback_segs;
SEGMENT_NAME OWNER STATUS
SYSTEM SYS ONLINE
_SYSSMU1$                      PUBLIC ONLINE
_SYSSMU2$                      PUBLIC ONLINE
_SYSSMU3$                      PUBLIC ONLINE
_SYSSMU4$                      PUBLIC ONLINE
_SYSSMU5$                      PUBLIC ONLINE
_SYSSMU6$                      PUBLIC ONLINE
_SYSSMU7$                      PUBLIC ONLINE
_SYSSMU8$                      PUBLIC ONLINE
_SYSSMU9$                      PUBLIC ONLINE
_SYSSMU10$                     PUBLIC ONLINE
SEGMENT_NAME OWNER STATUS
_SYSSMU11$                     PUBLIC ONLINE
_SYSSMU12$                     PUBLIC ONLINE
_SYSSMU13$                     PUBLIC ONLINE
_SYSSMU14$                     PUBLIC ONLINE
_SYSSMU15$                     PUBLIC OFFLINE
_SYSSMU16$                     PUBLIC OFFLINE
_SYSSMU17$                     PUBLIC OFFLINE
_SYSSMU18$                     PUBLIC OFFLINE
_SYSSMU19$                     PUBLIC OFFLINE
_SYSSMU20$                     PUBLIC OFFLINE
_SYSSMU21$                     PUBLIC OFFLINE
SEGMENT_NAME OWNER STATUS
_SYSSMU22$                     PUBLIC OFFLINE
_SYSSMU23$                     PUBLIC OFFLINE
_SYSSMU24$                     PUBLIC OFFLINE
_SYSSMU25$                     PUBLIC OFFLINE
_SYSSMU26$                     PUBLIC OFFLINE
27 rows selected.
Currently AUTOEXTEND is ticked as on for SYSTEM tablespace and its size is showing as 99.16% (466.06 mb) used which is very much nearing to its full capacity of 470 mb.
Currently 75 users - 50 Local users and 20 Remote Users are connected to the server. Is there any limit that Server should have limited connections.
Server has Windows 2003 Standard Edition. Has Windows 2003 anything to do
with the no. of users getting connected ?

Single Database Session Per User in ADF/BC Application

Hi, I am using ADF with BC (JDeveloper 11.1.1.1). My application contains multiple application modules, each connected to the same JDBC data source. On the app server, I have configured the data source to use Identity Based Connection Pooling.
My current configuration is resulting in numerous database sessions for each user. I have a requirement to use only a single database session per user HTTP session. Is there any way to configure the application modules to achieve this?
Thanks,
Brad

Hi,
use a single root Am module and make sure the others are used as nested modules. This will create a single connection
Frank

Migrate oracle database users into weblogic application users

Hello.
I need to migrate over 1000 users with its credentials(username, password,email,etc.) from existing ORACLE database into WEBLOGIC application user.
But I was facing problem with password hashes.
I have created user marlis and set password like marlis_2013:
- in oracle db it's hash is 2CDAD21E6A769A11
- in weblogic as it's hash is {SHA-1}a7OyKYOb/mUMsda8U9cw4ofgGlo=
How canb I migrate over 1K user credentials. Pls help.

I am using ADF security based on JAAS.

Script to know number of users over database and applications.

hi brothers.
kindly i need helpl to know script or command of number of online users over database and application.(i need it for performance issue).
Message was edited by:
user633617

set pages 100
set lines 3000
col machine format a25
col username format a15
col program format a25
break on 1;
set heading off;
select
'Sessions on database '|| d.name ||' having instance name '|| i.instance_name
from v$database d,v$instance i;
set heading on;
compute sum label 'Total Sessions' of sessions on 1
select
1,username,machine,program,count(*) sessions
from v$session
group by username,machine,program
order by username,sessions desc;

Application user USERNAME is not authorized this database.

I am trying to login to R12 through "http://<server_name:port>/forms/frmservlet" ,at the login screen while entering username & password , I'm getting
Application user <USERNAME> is not authorized this database.
Note : This is first time I am trying to login after R12 upgrade.

Error log
[Mon Mar 28 02:49:09 2011] [notice] Oracle-Application-Server-10g/10.1.3.4.0 Oracle-HTTP-Server configured -- resuming normal operations
[Mon Mar 28 02:49:09 2011] [notice] Accept mutex: fcntl (Default: fcntl)
[Mon Mar 28 02:51:01 2011] [error] [client 172.20.81.35] [ecid: 1301295061:151.110.228.14:31256:0:1,0] File does not exist: /opt/egapc2d/inst/apps/EGEBC2D_etad546/portal/favicon.icoApplication log :
11/03/28 02:44:53.602 html: Servlet error
java.lang.NoClassDefFoundError: Could not initialize class oracle.apps.fnd.sso.Utils
at oracle.apps.fnd.sso.AppsLoginRedirect.AppsSetting(AppsLoginRedirect.java:116)
at oracle.apps.fnd.sso.AppsLoginRedirect.init(AppsLoginRedirect.java:170)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpApplication.loadServlet(HttpApplication.java:2379)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpApplication.findServlet(HttpApplication.java:4830)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpApplication.findServlet(HttpApplication.java:4754)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpApplication.getRequestDispatcher(HttpApplication.java:2978)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:738)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) >].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:619)
Caused by: oracle.apps.fnd.common.AppsException: oracle.apps.fnd.common.PoolException: Not able to create new database connection: FND^@SECURITY_APPL_USER_NOTAUTH^@N^@USER^@GUEST^@
Caused by: oracle.apps.fnd.common.PoolException: Not able to create new database connection: FND^@SECURITY_APPL_USER_NOTAUTH^@N^@USER^@GUEST^@

Confussing between Database User and Application User in Discoverer

Hi All,
I am new to Discoverer.
Please let me know the difference between Database User and Application User in Discoverer Administrator as well as in Discoverer Desktop Editions.
1) While I am trying to connect to Discoverer Desktop, I am unable to connect to it with Apps Database User.
2) Where the Discoverer compenent will be installed and what the configuration settings need to done work on it.
Please let me know the answers soon.
Thanks in Advance.

Hello
I think a database user should pretty much be self explanatory - this is a user account that exists in the database. This account is created by your Database Administrator (DBA).
The second kind of user that Discoverer understands is a user that exists inside Oracle E-Business Suite (EBS), formerly known as Oracle Applications, hence an application user. This user account gets created by the EBS system administrator.
Now, just because you're using EBS, it does not automatically follow that users will be application users. Let me explain.
Discoverer can be installed in one of two modes, standard mode and Applications mode.
The vast majority of organizations use standard mode which means they allow database users to access the system.
The only time that you will need an applications account is under the following two rules:
1. Your organization is using E-Business Suite, AND
2. Your Discoverer administrator has installed Discoverer in Applications mode.
Applicatons mode does not happen automatically, even if you have EBS, and you cannot install that mode by accident. You have to tell Discoverer that it is operating in that mode, provide some additional EBS account information, make security assignments and set users have to deliberately tell Discoverer they want to connect using an applications account.
May I suggest you get hold of a copy of the Oracle Discoverer 10g Handbook that I wrote. That book explains in detail the differences between the modes. I also have a free white paper on my website that describes how to install Discoverer into Applications mode.
I hope this helps
Best wishes
Michael
http://ascbi.com

How to use your own database with your users to authenticate in a Web app?

Hello, everybody!
I'm starting to write my first web application and I'm going to use JSF, JPA and EJB3 in this application. One of the first things that I have to do on it is the authentication part where I'll have a page with a user name and a password for the user to login. So, as I'm new to all this in Java (I've already implemented this on .NET in the past), I was studying the Java EE 5 Tutorial, especifically the section "Example: Using Form-Based Authentication with a JSP Page". But I saw that the users that the sample application uses come from the file realm on the Application Server. The users are created there and assigned a name, a password and a group. After the users are in the Application Server we can simply uses forms authentication declaratively in the deployment descriptor (web.xml).
But the problem is that this doesn't work to me as I already have my own database with my users, so I want to use it instead of having to create the users on the Application Server.
So, I'm asking you how to do that. Of course I'm not expecting that you place the code here to me as I know that such a thing could be complicated. Instead, I'm asking if you know about some tutorial, article, book or something that teaches how to do what I want. But I would like to see theses examples using JSF and/or EJB3 because these are the technologies that I'm using to develop. It's a pity that the Java EE 5 Tutorial doesn't have an example using a custom database as I know that this situation is very common in the majority of web sites.
Thank you very much.
Marcos

From memory, it goes like this... You just create a
raw jdbc connection on your user database using a
special "login" DB user account, which has
permissions only to an "authenticate" stored query,
which accepts two arguments: username & password, and
returns a boolean 0 or 1 rows found.When I implemented this in .NET's ASP.NET I had the same solution. I had an special user created in the database that I used to log in. When the real user entered his username and password I was already logged in and I had just to check his username and password agains the right table in my database.
But that was only possible bacause when I connected to the database using my hidden user, I used the rights APIs in ASP.NET that coordinate the authentication process. This means that before login in, no one could access any resources (pages, atc...). So what I'm saying is that I can't manager this manually in Java. Java has to have some API or whatever to allow me to control the login process programmatically, while letting the Application Server control the access to the resources.

Cannot log in as an application user on Discoverer Desktop

Hi
I have Discoverer Desktop 4.1.37.00.0 on a laptop. When I try to log in as an application user, when in connect field I enter database name, I get the following error message:
ORA-12154:TNS:could not resolve service name
When instead of databse name I input connect string in tnsnames.ora file, I get another error message:
Unable to connect to Oracle Application Database:Invalid username/password
Please note that the checkbox 'oracle application user' is enabled while attempting to log in.
Secondly, in my Administration Edition in Tools>options>connections
the following settings have been done:
Connect to both standard and applications EULs
Gateway User Id (GWYUID)/Password : APPLSYSPUB/PUB
FNDNAM : APPS
Similar seetings have been done for the desktop.
Also note that I cannot even log in as a database user. The error message I receive is
'You do not have access to any End User Tables.'
The database user name I'm using to log in is the one who has created EUL(apps mode) and owns business areas in that EUL.
Can someone please guide me on this problem?
Regards,
Aparna

Hi
The solution to my problem was exactly the same: I needed to apply the patch 3201601.
This patch is available on http://metalink.oracle.com
While installing the version 4.1.48.06.00 on my laptop, as I have XP, I came across some DLL errors.
For this refer to the note 297750.1, DLL Copy Errors when Trying to Patch Discoverer Administrator/Desktop 4.1
The note is also available on the metalink.
Regards,
Aparna

Insufficient SQL database permissions for user 'Name: NT AUTHORITY\IUSR SID: S-1-5-17...

Hi,
I have a customized SharePoint page that takes user input data, validate some of the data, then writes the data to a SharePoint list. If an exception occurs, it will write the error to the ULS.
All was working well in the test environments.
However, recently we noticed that in the QA environment, when it's trying to write to ULS, it causes another issue:
Insufficient SQL database permissions for user 'Name: NT AUTHORITY\IUSR SID: S-1-5-17 ImpersonationLevel: Impersonation' in database 'SP_F1_Config' on SQL Server instance 'SQL01'. Additional error information from SQL Server is included below. The EXECUTE
permission was denied on the object 'proc_putObjectTVP', database 'SP_F1_Config', schema 'dbo'.
I've traced through the code and found that it fails on the line:
SPDiagnosticsServiceBase.GetLocal<LoggerError>();
where LoggerError is the logger class inheritng SPDiagnosticsServiceBase
I have also googled around today, but the most positive solution provided
on this page was to manually modify SQL object permission, which I believe we should not do, and would not be supported by Microsoft.
So the questions are:
Why is AUTHORITY\IUSER used for SPDiagnosticsServiceBase.GetLocal()? Should that account actually be allowed to access SharePoint databases? (This is an intranet environment and using claim based/Windows authentication, no no anonymous access would be allowed
anyway).
I've checked the Application Pool account permissions in SQL, comparing the environment that works and the one that doesn't work, and the permissions/roles/schemas look identical on server and database level. Where else can I check?
On the environment that works, I logged on as SharePoint administrator, created a new SharePoint Visual Web Part solution in Visual Studio, just to test writing to ULS. Then I press F5 in Visual Studio to debug it. It also has the same problem.
It just seems like somehow the user's identity (or whatever the identity SharePoint required) was not passed to SPDiagnosticsServiceBase.
Any suggestions, or even better, solutions would be really really much appreciated!

Hi，
Thanks for your sharing, it will be userful to the people who stuck with the same issue.
Best regards
Patrick Liang
TechNet Community Support

Query execution is faster - as SYS user vs. application user in 11.1.07

In +11.1.0.7+ database, we have noticed execution of an application process as SYS user is faster than the application user. To quantify this execution time was 2 hours as application user and same process when executed as SYS user completed in 1 hour.
We ran tracing for this process and tkprof output showed follwoing:
OVERALL TOTALS FOR ALL RECURSIVE STATEMENTS:
_call          count      cpu       elapsed disk query current rows_
Execute 3705586 2440.49 *4294.54* 293602 21835223 23300886 3801288 <<< ==== SYS
Execute 3703285 6356.69 *8576.50* 303175 21785419 23378086 3801291 <<< ==== Application user
We have SR open with Oracle, but thought if some one knows about this issue would be great.
Edited by: dhyani on Aug 17, 2010 3:16 PM

What about the "Predicate Information" section of the execution plans - were those exactly the same? Did you use AUTOTRACE, EXPLAIN PLAN FOR, or the method that I showed to retrieve the execution plans? Where the SQL_ID and CHILD_NUMBERS displayed exactly the same? Is the STATISTIC_LEVEL set to TYPICAL for both sessions? You can check the setting in SQL*Plus like this:
SQL> SHOW PARAMETER STATISTICS_LEVEL
NAME                                 TYPE        VALUE
statistics_level                     string      typicalAs a demonstration, I will change the value at the session level and then change the setting back:
SQL> ALTER SESSION SET STATISTICS_LEVEL='ALL';
SQL> SHOW PARAMETER STATISTICS_LEVEL
NAME                                 TYPE        VALUE
statistics_level                     string      ALL
SQL> ALTER SESSION SET STATISTICS_LEVEL='TYPICAL';If the above does not show a difference, you will need to capture a 10046 trace at either level 8 or level 12 for both sessions and compare the wait events and the STAT lines in the 10046 trace to see where the additional time is being spent. Reference these two blog articles for the 10046 trace:
http://hoopercharles.wordpress.com/2009/12/01/10046-extended-sql-trace-interpretation/
http://hoopercharles.wordpress.com/2010/01/26/10046-extended-sql-trace-interpretation-2/
Keep in mind that the goal is to not change anything until we understand the problem better. Maybe, just maybe, someone created a table (or view) or two in the SYS schema (or used a table/view name that matched a SYS owned object), in a normal user's schema, or there are synonyms pointing to different tables. So, it probably would be a good idea to verify that the results are exactly the same when the SYS user executes the SQL statement and a normal user executes the SQL statement.
Charles Hooper
Co-author of "Expert Oracle Practices: Oracle Database Administration from the Oak Table"
http://hoopercharles.wordpress.com/
IT Manager/Oracle DBA
K&M Machine-Fabricating, Inc.

Terminate process or database session by User ID

I have an web application with Client (JSP etc.) - Application (APACHE TOMCAT) and Database (Oracle) tiers. The application user IDs are managed by application layer and only one user ID is used to connect to database.
As a DBA, how do I identify the "actual" application user that is running a particular process/database session? The purpose of identifying processes is due to many reasons such as to terminate un-used process, intentionally terminating a particular process (due to any reason), monitoring user access to a particular database, tables etc.
Any idea of how to implement the above-mentioned user access control by DBA?
Thanks
ktt

You can't unless the application plays nice and passes it to you.
It is this lack of cooperation that leads many of us to be less than pleased with most middleware.

How to find how many cursors are opend for application user

Hi all,
how to find out how many cursors are opend for application user and how many are opend for database user
Regards,
RM

Oracle does not know the difference between an "application user" and a "database user".
Oracle deals with a session. This session services a client. The client can be a J2EE application. It can be a Delphi client. It can be a SQL*Plus command line tool. It can be TOAD. Etc.
Oracle does not care who/what/where the client is when dealing with cursors and SQL. It deals with the session that services that client.
How many cursors does a session have opened?
Refer to V$OPEN_CUSOR in [url http://download.oracle.com/docs/cd/B19306_01/server.102/b14237/dynviews_2008.htm#sthref3807]Oracle® Database Reference.
A select count on V$OPEN_CURSOR for a specific SID (Session ID) will return the number of open cursor handles in that session.

Not able to connect through Application user name in Discoverer Admin

Hi,
I created an EUL with all privileges it needed. I created a business area from that EUL and shared it to Application User name through giving access privileges (from Security and Privileges). When I am trying to login through the Application User name in Discoverer Admin it is giving the error like:
Failed to connect to database - Unable to connect to Oracle Applcations database: invalid username/password.
Earlier I did in another instance it worked fine but now itself I am facing the problem.
Thanks & Regards,
Arun Babu R.

Hi,
Please post the application release along with the database version and OS.
What is the Discoverer version?
Please see these docs.
Connecting to an E-Business Suite EUL Using Any Discoverer Component Fails With "Authentication Failed" or "ORA-01017: invalid username/password;logon denied" [ID 364665.1]
Discoverer 10g (10.1.2) Connections To Oracle E-Business Suite 12 Fails With 'Invalid Username/Password' [ID 443661.1]
Discoverer 10g (10.1.2) Plus/Viewer Connection To E-Business Suite Database Fails With " invalid username/password" Error [ID 467919.1]
Connecting to Oracle EBS 11.5.10 with Discoverer 4i/10g Fails with ORA-01017 Invalid Username/Password Error [ID 295037.1
Discoverer Desktop/Administrator 10g (10.1.2.2) Fails To Connect With Error 'Unable to connect to Oracle Applications database: invalid username/password. ' Only Between Certain Hours [ID 757384.1]
Connecting to Oracle EBS with Discoverer Fails with ORA-01017 Invalid Username/Password Error [ID 784358.1]
Discoverer 4i Viewer/Plus Logon To Oracle Applications EUL Fails with "ORA-1017 Invalid Username/Password" Unless a Colon '' : '' is Entered After Username [ID 360314.1]
Questions And Guidance For Troubleshooting Common Discoverer Desktop and Administrator Connection Issues [ID 415614.1]
Thanks,
Hussein

How to put database in single user mode?

hi
how to put database in single user mode?and what could be the impact of this to EBS R12 RUP 6.DB 10.2.0.0
rgrds

hsawwan wrote:
Hi,
Are you referring to restricted mode? If yes, please see these links/docs.
Restricting Access to an Open Database
http://download.oracle.com/docs/cd/E11882_01/server.112/e10595/start002.htm#ADMIN11155
Note: 1059291.6 - How to Put a Database into Restricted Mode and Verify Restricted Mode
The impact is none of the users will be able to connect to the database/application (except for the sys user which can connect to the database). Usually, you would need to put the database in restricted mode when doing upgrade/migrate (i.e. you do not want to have active user sessions in the database during that time).
Thanks,
HusseinHi
i want to mean:
ALTER SYSTEM QUIESCE RESTRICTEDThe ALTER SYSTEM QUIESCE RESTRICTED statement may wait a long time for active sessions to become inactive. You can determine the sessions that are blocking the quiesce operation by querying the V$BLOCKING_QUIESCE view. This view returns only a single column: SID (Session ID). You can join it with V$SESSION to get more information about the session, as shown in the following example:
select bl.sid, user, osuser, type, program
from v$blocking_quiesce bl, v$session se
where bl.sid = se.sid;I suspect all apps user can.t login to db?
Edited by: new2appsdba on Aug 19, 2010 1:54 AM

Database vs application users

Similar Messages

Maybe you are looking for