Intesting requiremnet

I have been asked to give user A account lock and unlock so that it can lock and unlock only user B but if I happen to give it to user A then it can be used against.

did some research and came to conclusion that following looks promising to me.


create or replace procedure MYLOCK as
begin
execute immediate 'alter user A account lock';
end;


create or replace procedure MYUNLOCK as
begin
execute immediate 'alter user A account unlock';
end;

grant execute on mlock,munlock to B;


connect as B

SQL> exec sys.mlock

SQL> conn A/A


SQL> conn B/B

SQL > exec sys.munlock

SQL>conn A/A