Re: Forms/reports Application and DB security

Hi Juan,
I found this solution from metalink too .it seems to work but as I said before I have to modify all of my forms and reports to implement this solution .This is a huge task as you agree .

I couldnt understand the idea of " you can enable the role on a package in a logon procedure" . What did you mean by this ?

Best Regards

2006/6/8, Juan Carlos Reyes Pacheco <juancarlosreyesp_at_gmail.com>:
>
> Hi Muhammed
> This is the way you do in forms and reports
>
> 1) You create roles password protected.
> create role prueba identified by test;
> 2) Assign it to your users disabled.
> GRANT prueba TO CTB
> /
> ALTER USER CTB DEFAULT ROLE ALL EXCEPT prueba
> /
> 3) Then you enabled it in the application
> In forms
> DBMS_SESSION.SET_ROLE( 'prueba identified by test') );
> On reports
> there is a role_name property in your report
> 4) If you don't have an encrypter transmission, you can enable the
> role on a package in a logon procedure
>

--
http://www.freelists.org/webpage/oracle-l