RE: Puzzle - Hiding Data of some rows in a Table

  • From: "Polarski, Bernard" <Bernard.Polarski@xxxxxxxxxxxxxx>
  • To: <salem.ghassan@xxxxxxxxx>,<VIVEK_SHARMA@xxxxxxxxxxx>
  • Date: Mon, 16 Oct 2006 13:01:48 +0200

I guess that VPD rely somewhere on Fine Grain Control. 
I missed the link between FGAC and VPD but It is everything but simple.
I still have the joy to discover the pleasure to tune a query with
hidden predicates.
Must be fun.


From: Ghassan Salem [mailto:salem.ghassan@xxxxxxxxx] 
Sent: Monday, 16 October, 2006 12:57 PM
To: VIVEK_SHARMA@xxxxxxxxxxx
Cc: oracle-l@xxxxxxxxxxxxx
Subject: Re: Puzzle - Hiding Data of some rows in a Table

for puzzle 1, you could use VPD, it can do what you want,
For Puzzle 2, look at Database Vault (available for 10.2 only). It
allows you to forbid DBA from looking into data.


On 10/16/06, VIVEK_SHARMA <VIVEK_SHARMA@xxxxxxxxxxx> wrote: 



        Puzzle 1 - For a Banking Application, for certain V.I.P.
Accounts (translating to respective rows in a set of Tables), the
general Staff should NOT be able to View the respective Account info.
But Bank-wide summation reports fired by the same staff should consider
the Data from the VIP Accounts too.


        Puzzle 2 Additionally DBAs also should also NOT be able to see
the above data.


        Any ideas how this can be achieved?


        Qs Does Row based Encryption perchance exist in 10.2? If so, is
it a possible solution? If so, does it have performance overheads?


        Thanks indeed

**************** CAUTION - Disclaimer *****************
solely for the use of the addressee(s). If you are not the intended
recipient, please notify the sender by e-mail and delete the original
message. Further, you are not to copy, disclose, or distribute this
e-mail or its contents to any other person and any such actions are
unlawful. This e-mail may contain viruses. Infosys has taken every
reasonable precaution to minimize this risk, but is not liable for any
damage you may sustain as a result of any virus in this e-mail. You
should carry out your own virus checks before opening the e-mail or
attachment. Infosys reserves the right to monitor and review the content
of all messages sent to or from this e-mail address. Messages sent to or
from this e-mail address may be stored on the Infosys e-mail system. 
***INFOSYS******** End of Disclaimer ********INFOSYS***

Other related posts: