EXPERT RESPONSE
Unfortunately, all users have the ability to change
their own password. One of the ways to get around this
is to implement a password verification function that
will always fail, no matter what the password. Then
assign this password verification function to that
user.
Keep in mind that in today's ever-increasing need for
secure databases, that passwords should be changed on
a regular basis. Disabling password changing for a
user is probably not a very good idea.
|