RE: Security Issue in Oracle 9.2.0.3 DB
- From: "Charu Joshi" <joshic@xxxxxxxxxxxxxx>
- To: "ORACLE-L" <oracle-l@xxxxxxxxxxxxx>
- Date: Wed, 20 Oct 2004 15:25:19 +0530
What's the problem with having two separate schemas A & B. You will need to
follow strict object naming conventions, that would differentiate between
objects belonging to different schemas. With carefully designed naming
conventions, synonyms, roles and grants you should be able to achieve this.
Good luck,
Charu.
-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx]On Behalf Of Charlotte Hammond
Sent: Wednesday, October 20, 2004 3:16 PM
To: ORACLE-L
Subject: Re: Security Issue in Oracle 9.2.0.3 DB
Hi,
If your application is simple/small enough (and you really only have A & B
and this will never grow to include C, D, E etc) then you should be able to
do what you need simply using Views and granting security on the Views (use
the CHECK option to prevent A updating data belonging to B and vice versa).
For anything more complex you should look at Fine-Grained Access Control
(FGAC) in the manuals. This uses the DBMS_RLS package to define access
policies for tables.
Hope this helps,
- Charlotte
dear friends
we have one database on oracle9.2.0.3 and we have two compnies (Say A and B)
both are using the same database .
Now i want that A employess should not able to view or select or update or
insert any thing on B releted tables .
and vice versa ..
please guide me
With Best Wishes & Prayers,
Abhishek Saxena.
Mail - abhisheks@xxxxxxxxxxxxxxx
Tel - +91 20 25458277.
Mob - +91 20 33306103.
www.kpitcummins.com
(A SEI CMM Level 5 Company)
---------------------------------
Do you Yahoo!?
Express yourself with Y! Messenger! Free. Download now.
--
//www.freelists.org/webpage/oracle-l
*********************************************************
Disclaimer:
This message (including any attachments) contains
confidential information intended for a specific
individual and purpose, and is protected by law.
If you are not the intended recipient, you should
delete this message and are hereby notified that
any disclosure, copying, or distribution of this
message, or the taking of any action based on it,
is strictly prohibited.
*********************************************************
Visit us at http://www.mahindrabt.com
--
//www.freelists.org/webpage/oracle-l
Other related posts:
