Lock Application Owner Account

In order to make an IFS Applications installation more secure you have the possibility to lock the Application Owner account. This means that it is not possible to log on to either SQLPlus or any IFS Windows client as Application Owner. if Application Owner is not locked it is configured to be able to run almost everything in IFS Applications.

To lock Application Owner makes IFS Applications more secure because you cannot (unless you are SYS or SYSTEM) do changes to standard business logic such as deploy new versions or remove or add database objects. Furthermore there is one more important password less to keep safe.

Note: To lock Application Owner is an optional step to improve security, this step not required in order to run IFS Applications.

Contents

How to Lock the Application Owner

When you should lock Application Owner account you have two possibilities either to do it from SQLPlus or from IFS Applications.

SQLPlus

Log on to SQLPlus as SYS and enter the following command:

IFS Applications

In window Manage Oracle Users you can lock Application Owner account (if you have system privilege ALTER  USER granted).

Note: In order to make your system safer you should remove system privilege ALTER USER from Application Owner, then you can not lock or change passwords on other accounts than your own from Manage Oracle Users.

How to Unlock the Application Owner

SQLPlus

Log on to SQLPlus as SYS and enter the following command:

IFS Applications

Using Manage Oracle Users you can unlock Application Owner account (if you have system privilege ALTER  USER granted).

Note: In order to make your system safer you should remove system privilege ALTER USER from Application Owner, then you can not unlock or change passwords on other accounts than your own from Manage Oracle Users.

Installing, upgrading or patching of IFS Applications

If you need to install new code, must perform an upgrade of IFS Application or even have to patch some code you need to unlock Application Owner account in order to be able to complete this task.

Features in IFS Applications requiring Application Owner

There are also configuration steps where you are required to deploy thing directly in the database. In some of these case you need to logon as the application owner. See the instructions for each scenario.