Disabling Commands with SQLPLUS -RESTRICT

참고:  http://winslab.cnu.ac.kr/Oracle%20API/server.101/b12170/ch4.htm#i1169742

RESTRICT Option

-R[ESTRICT] {1|2|3}

Enables you to disable certain commands that interact with the operating system. This is similar to disabling the same commands in the Product User Profile (PUP) table. However, commands disabled with the -RESTRICT option are disabled even if there is no connection to a server, and remain disabled until SQL*Plus terminates.

If no -RESTRICT option is active, than all commands can be used, unless disabled in the PUP table.

If -RESTRICT 3 is used, then LOGIN.SQL is not read. GLOGIN.SQL is read but restricted commands used will fail.

Table 4-1 Commands Disabled by Restriction Level

Command	Level 1	Level 2	Level 3
EDIT	disabled	disabled	disabled
GET			disabled
HOST	disabled	disabled	disabled
SAVE		disabled	disabled
SPOOL		disabled	disabled
START, @, @@			disabled
STORE		disabled	disabled

Notes:
• Disabling HOST also disables your operating system's alias for HOST, such as $ on Windows, and ! on UNIX.
• Disabling the SQL*Plus START command will also disable the SQL*Plus @ and @@ commands.