Oracle application Audit files information
REM *
REM * PROGRAM: rahc_sec_profiles.sql
REM * USAGE: @rahc_sec_profiles.sql
REM *
REM * LANGUAGE: SQL*Plus
REM *
REM * DESCRIPTION: Check FND security profile
REM * Please pay attention in the
following profile
REM * Sign-On:Audit
Level
(A=None,B=User,C=Responsibility,D=Forms)
REM *
Sign-On:Notification
Y/N
REM * Signon Password
Custom
custom function to encrypt/decrypt password
REM * Signon Password
Failure
Limit
REM * Signon Password Length
REM * Signon Password
Nouse
REM * Signon Password
Hard to Guess Y/N
REM * Password case
sensitive
11.5.10.2
REM *
REM * EXAMPLES:
REM * @rahc_sec_profiles.sql
REM *
REM * NOTES:
REM *
REM * CHANGES:
REM *
REM * Version
Date
Who
Comments
REM * 1.0.0
02-May-07 Somchart L. Initial
version.
REM *
prompt
prompt
====================================================================================================================================
prompt Checking security profiles
prompt
====================================================================================================================================
prompt
CLEAR COLUMNS
CLEAR BREAKS
SET TRIMSPOOL ON
SET VERIFY OFF
SET FEEDBACK OFF
SET LINESIZE 132
SET PAGESIZE 50
col profile_option_id format 999999 heading
"Profile|Option ID"
col Pro_Level format a20 wrap
col user_name format a20 wrap
col Prof_Name format a40 wrap
col Prof_Value format a20 wrap
SET HEADING ON
TTITLE 'Security Profiles'
SELECT v.profile_option_id
,
decode(v.level_id,10001,'Site'
,10002,'Application'
,10003,'Responsibility'
,10004,'User'
,v.level_id) Pro_Level
, user_name
,
pot.user_profile_option_name prof_name
,
substr(v.profile_option_value, 1,45) prof_value
FROM
apps.fnd_profile_options
o
,
apps.fnd_profile_options_tl pot
,
apps.fnd_profile_option_values v
, apps.fnd_user fu
WHERE
o.profile_option_name
= pot.profile_option_name
AND o.profile_option_id =
v.profile_option_id (+)
AND
o.application_id = v.application_id (+)
AND v.level_value = fu.user_id
(+)
AND
(pot.user_profile_option_name like 'Sign%assword%'
or
pot.user_profile_option_name like 'Sign%otific%'
or
pot.user_profile_option_name like 'Sign%udit%'
or
pot.user_profile_option_name like 'Utilities%Diag%'
or
pot.user_profile_option_name like 'ICX:Session
Timeout')
ORDER BY v.level_id, pot.user_profile_option_name
/
TTITLE OFF
prompt
prompt Note:
prompt Metalink Note 233436.1 recommends the following
profiles
prompt -
SIGNON_PASSWORD_LENGTH = 8
prompt - SIGNON_PASSWORD_HARD_TO_GUESS = YES
prompt -
SIGNON_PASSWORD_NO_REUSE = 180
prompt -
ICX_SESSION_TIMEOUT
= 30 (unless using SSO with OID)
prompt
exit
Comments
Post a Comment