Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How can users be prevented from executing devious commands?

April 26, 2017commands devious executing Users

0

Posted

How can users be prevented from executing devious commands?

1 Answer

0

Posted

Yes, command authorization is verified against the SYSTEM.PRODUCT_USER_PROFILE table. This table is created by the PUPBLD.SQL script. Note that this table is not used when someone signs on as user SYSTEM. Eg. to disable all users whose names starts with OPS$ from executing the CONNECT command: SQL> INSERT INTO SYSTEM.