| Oracle Label Security - Insert Operation [message #505206] |
Sat, 30 April 2011 06:21 |
 |
informatikus
Messages: 1
Registered: April 2011
|
Junior Member |
|
|
Hello everybody!
My question is about the INSERT-operation on tables which are protected by Oracle Label Security.
Source for the rules for access control:
www.stanford.edu/dept/itss/docs/oracle/10g/network.101/b10774.pdf
On page 76/338: Read-Control rules
On page 78/338: Write-Control rules
Write-Control comprises Update-, Insert- and Delete-operations.
When read-control is applied and also when write-control is applied (in both cases), the data-level is compared with the user-level.
This comparison (data-level vs. user-level) is possible on Select-, Update- and Delete-operations, because the data-label aleady exists.
But I don't understand how it works an Insert-operations:
When I write a new row, I can't compare the data-level with the user-level, because the label does not yet exist!
How can I apply the rule on page 78/338 then?
Or does the label-column contain a default label for all unused/empty rows?
Thank you very much for help!
I'd really like to understand that point..
Greetings.
[Updated on: Sat, 30 April 2011 10:10] Report message to a moderator |
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
