We have a need to selectively disable logons as part of our D/R test. I know how to disable ALL logons but we would like to disable logons and then enable only specific groups over a period of time throughtout the test. We are considering revoking Roles for those users and then granting the roles back to them but I wanted to know if there was a more graceful way to accomplish this task.
I was playing around a bit and came up with the following... Not sure if this is what you are looking for:
sel 'revoke logon on all from ' || '"' || trim(databasename) || '"' || ';' (TITLE '')
where databasename in ('user1','user2',...)
and passwordSalt is not null
and databasename not in ( 'DBC','SYSDBA',...)
order by 1;
That would certainly work to revoke the specifc users access but I'd need to know what they had so I could indivifulally grant it back to them as the test progresses. Also, can you tell me what the passwordSalt column is?