Restricting users from backend changes

Question

Hello,
I have some users who keep doing the changes from backend without going into the application ( Forms 10g Frontend). I want to restrict all users to change the data from backend so that whenever they use sqlplus they can't change the records in the tables. But whenever they are running the application ( Oracle forms) they should be able to change(insert/Update/Delete) the records in the table. Any suggestion how can I make this happen.
Thank you.

Answer 1

Assuming the users dont have the schema owner password and have to log into their own accounts in sqlplus.
grant a role to the user identified by a password. Dont tell the users the password. :)
grant select, insert, update, delete, execute permissions to specific tables, functions, procedures to the role.
When the users go into sqlplus they wont be able to do anything until the role is enabled since it has a password. Remember, they dont know the password so they are not going to be doing much.
In your pre-form trigger do this to enable the role so they can do things.
Check to see if the currently logged in person has the role assigned..
SELECT GRANTED_ROLE
FROM USER_ROLE_PRIVS
WHERE USERNAME = my_username_variable and
granted_role = 'MY_ROLE';
if they do have the role then do this...
DBMS_SESSION.SET_ROLE('my_role IDENTIFIED BY my_password');
Now they can insert, update, delete and so on from the form.