RE: VPD Pre/Post Implementation Issues

  • From: "VIVEK_SHARMA" <VIVEK_SHARMA@xxxxxxxxxxx>
  • To: <oracle-l@xxxxxxxxxxxxx>, <oracledba@xxxxxxxxxxx>
  • Date: Thu, 19 Aug 2004 11:24:53 +0530

Thanks indeed Justin for the valuable advice.

AIM - To Set Row level security using VPD on a Centralized Database

Qs What is the Affect on Database performance?

Qs Any General Benchmarks on the Affect on performance due to
implementation
of VPD?

Qs What type of SQL Queries are most impacted SELCT, INSERT, DELETE,
UPDATE
by VPD?

Qs Based on nature of Tables Transaction, Master, History etc Are there
some
best practices to follow when creating policies?

Qs What are the major Pre/Post implementation issues?

Qs ANY GOOD LINKS, DOCS? (Already Checked metalink somewhat)

Environment:-
Oracle 9i,
Application Hybrid in nature,
Database - Large in Size a few Hundred GB, High Concurrent Transactions
Load, Periodic Reports Generation.


-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Justin Cave
Sent: Wednesday, August 18, 2004 11:58 PM
To: oracle-l@xxxxxxxxxxxxx; oracledba@xxxxxxxxxxx
Subject: RE: VPD Pre/Post Implementation Issues

The affect on performance will be highly dependant on the security
functions
you write. =20

Under the covers, all VPD is rewriting your SQL statements to add
additional
clauses.  If you are merely adding clauses to statements, i.e. having
Oracle
transform

SELECT * FROM emp

To

SELECT * FROM emp WHERE dept =3D 10

For an employee in department 10, VPD will possibly improve performance.
If, on the other hand, you are forcing Oracle to add in a couple of
joins to
large tables, or to execute functions that perform poorly, VPD could
cause
some significant problems.

Justin Cave
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC


----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts: