I want a user to use only import, it run with export but not import

Question

Hi,
i create a user for use only for import and for export.
batch_export with exp_full_database role <- It run
batch_import with imp_full_database role <- don't run
P:\>sqlplus batch_export/batch
SQL*Plus: Release 10.1.0.2.0 - Production on Lun. Ao¹t 21 17:21:58 2006
Copyright (c) 1982, 2004, Oracle. All rights reserved.
ERROR:
ORA-00604: une erreur s'est produite au niveau SQL rÚcursif 1
ORA-20000: Connexion refusee
ORA-06512: Ó ligne 41
Entrez le nom utilisateur :
P:\>sqlplus batch_import/batch@rfsage
SQL*Plus: Release 10.1.0.2.0 - Production on Lun. Ao¹t 21 17:03:36 2006
Copyright (c) 1982, 2004, Oracle. All rights reserved.
ConnectÚ Ó :
Oracle Database 10g Enterprise Edition Release 10.1.0.2.0 - Production
With the Partitioning, OLAP and Data Mining options
SQL> exit
the trigger as run
create or replace trigger batch_export.check_connexion after logon on database
declare
V_MODULE SYS.V_$SESSION.module%TYPE;
V_TERMINAL SYS.V_$SESSION.terminal%TYPE;
V_SID SYS.V_$SESSION.SID%TYPE;
V_SERIAL SYS.V_$SESSION.SERIAL#%TYPE;
V_COMMAND varchar2(100);
V_CURRENT_USER varchar2(20);
V_CURRENT_SID SYS.V_$SESSION.SID%TYPE;
cursor connexion is
select substr(module,1,7) module, substr(terminal,1,12) terminal, sid, serial# from v$session T1 where schemaname='BATCH_EXPORT';
cursor ID_CUR is
select user from dual;
cursor SID_CUR is
select SYS_CONTEXT('USERENV','SID') sessionid from dual;
--select SYS_CONTEXT('USERENV','CURRENT_USERID') current_userid from dual;
Begin
open SID_CUR;
loop
fetch SID_CUR into V_CURRENT_SID ;
EXIT WHEN SID_CUR%NOTFOUND;
dbms_output.put_line('V_CURRENT_SID:'||V_CURRENT_SID);
end loop;
close SID_CUR;
open ID_CUR;
loop
     fetch ID_CUR into V_CURRENT_USER ;
     EXIT WHEN ID_CUR%NOTFOUND;
     if V_CURRENT_USER='BATCH_EXPORT' then
     open connexion;
     loop
          fetch connexion into V_MODULE,V_TERMINAL,V_SID,V_SERIAL ;
          EXIT WHEN connexion%NOTFOUND;
          if V_MODULE<>'EXP.EXE' then
          dbms_output.put_line('V_SID:'||V_SID);
          dbms_output.put_line('V_CURRENT_USER:'||V_CURRENT_USER);
               if V_CURRENT_SID=V_SID then
               dbms_output.put_line('MODULE:'||V_MODULE);
               RAISE_APPLICATION_ERROR (-20000,'Connexion refusee');
               end if;
          end if;
     end loop;
     close connexion;
     end if;
end loop;
close ID_CUR;
End;
as the same for import user.
I try with role in trigger but it don't, i see this in forum Oracle.
But i think EXP_FULL_DATABASE have not DBA rule, but IMP_FULL_DATABASE have.
How i do this ?
I want just to use a user to imp utilities, but not connexion in sqlplus.
Thanks for your help
Christophe

Answer 1

thanks for your help.
it run !
for example :
as the system user
SQL> INSERT INTO PRODUCT_USER_PROFILE values ('SQL*Plus', 'BATCH', 'CONNECT',null,null, 'DISABLED', NULL, NULL);
1 ligne créée.
SQL> grant create session to batch;
Autorisation de privilèges (GRANT) acceptée.
SQL> INSERT INTO PRODUCT_USER_PROFILE values ('SQL*Plus', 'BATCH', 'SELECT',null,null, 'DISABLED', NULL, NULL);
1 ligne créée.
the result
oracle@debian:~$ sqlplus batch/batch;
SQL*Plus: Release 10.2.0.1.0 - Production on Mar. Août 22 06:53:00 2006
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Connecté à :
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options
SQL> select user from dual;
SP2-0544: Commande "select" désactivée dans le profil utilisateur du produit
SQL>
oracle@debian:~$ exp batch/batch owner=batch file=test.dump
Export: Release 10.2.0.1.0 - Production on Mar. Août 22 06:54:32 2006
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Connecté à : Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options
Export fait dans le jeu de car WE8DEC et jeu de car NCHAR AL16UTF16
le serveur utilise le jeu de caractères WE8ISO8859P1 (conversion possible)
Prêt à exporter les utilisateurs spécifiés ...
. export des actions et objets procéduraux de pré-schéma
. export des noms de bibliothèque de fonctions étrangères pour l'utilisateur BATCH
. export des synonymes de type PUBLIC
. export des synonymes de type PRIVATE
Thanks for all