Re: Column Access

  • From: Mladen Gogala <gogala@xxxxxxxxxxxxx>
  • To: bdbafh@xxxxxxxxx
  • Date: Sat, 12 Mar 2005 07:31:10 +0000

On 03/11/2005 04:20:26 PM, Paul Drake wrote:
> Laura,
>=20
> What you might be after is "Fine Grained Access Control" or "Virtual
> Private Database".
> http://www.oracle.com/technology/oramag/oracle/04-mar/o24tech_security.ht=
ml
>=20
> This is available as an option on top of Enterprise Edition.=20
> What version of the database software are you using?
>=20
> Its easy to confuse Fine Grained Auditing (FGA) which is included in
> Enterprise Edition, with Fine Grained Access Control (FGAC), but that
> is Oracle terminology for you.
>=20
> other papers are available at Pete Finnigan's site:
> http://www.petefinnigan.com/orasec.htm
> http://www.securityfocus.com/infocus/1743

A source that also deserves mentioning is Arup Nanda's book about
privacy and HIPAA: "Oracle Privacy Security Auditing", published=20
by Rampant Books. It doesn't have much about mechanical parts, it's
devoted to HIPAA and SoX and Oracle techniques that can be used to
achieve compliance with those two laws. It also gives a detailed
explanation of FGAC, along with numerous examples and code snippets.
That book should be used in addition to Pete Finnigan's site, which
is a real cornucopia of useful security advice. Note 207959.1 is also
a mandatory reading.

--=20
Mladen Gogala
Oracle DBA


--
//www.freelists.org/webpage/oracle-l

Other related posts: