Mailing-List: contact torque-user-help@db.apache.org; run by ezmlm
Subject: Getting access to the db connections
To: torque-user@db.apache.org
Message-ID: 
 <OF7D4B8330.496F82EA-ON85256CF3.007F8EFA-85256CF3.008096B2@us.ibm.com>
From: Steve Lukshides <lukshide@us.ibm.com>
Date: Mon, 24 Mar 2003 18:25:28 -0500
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII


Hi All,

Our Oracle DB Admin insists that we run a stored procedure for each
connection made to the database.  I'm not an Oracle DBA so forgive me if
this explanation is less than clear.  As a security measure he expects
every connection made to the database to call a stored procedure to set the
application's role.  The idea is to prevent someone from logging on to the
DB through SQL Plus with the user name and password that Torque uses and
gain rights to use the database.  If someone were to discover the
username/password that Torque uses and then logs on through SQL Plus they
would not gain any rights until the SP is executed, which they are not
likely to know and will be difficult to discover.

So my question is, how can I get at each connection that Torque
establishes, preferably at the time it is established, and use it to
execute the SP on?  Is this practical?  Is there a better way to do this?

Thanks,
Steve Lukshides

Sr. I/T Specialist, IBM Global Services
1475 Phoenixville Pike, West Chester, PA 19380
Phone: 610-989-0340
Voice Mail: 610-578-2385  IBM Tie Line: 873-2385
Email: lukshide@us.ibm.com