Suggestions for security please....

[lewisp]

Whats the best way to allow full access to a table in an Oracle form, but prevent the same (Oracle) user from modifying data in the same table using Sql*Plus, TOAD or somesuch?

I've tried using the PRODUCT_USER_PROFILE method which works fine for Sql*Plus, but I cant use this method to prevent access with TOAD. Can I?

 

[avictora]

1. Revoke all the permissions given to the user for the required table
2. Create a Role
3. Grant the necessary permissions for that table to the Role
4. On the new-form instance trigger of the form set the role using the dbms_session packaged procedure
5. Once the session gets over the role also looses its scope and this prevents access thru any other mode

 

[lewisp]

Thanks avictora.

Is there anything I can do if the user is also the table owner?