Oracle-L: Re: global context

From: AK <oramagic_at_hotmail.com>
Date: Thu, 31 Jul 2003 13:49:23 -0800
Message-ID: <F001.005C80AF.20030731134923@fatcity.com>

oops looks like i missed "using package ..." part in doc and shoot the question . Not this makes little sens ;) sorry guys .

-ak

Original Message ----- From: AK To: ORACLE-L_at_fatcity.com Sent: Thursday, July 31, 2003 1:41 PM Subject: global context

We used to have roles enabled by application front end . That was not secure . Then oracle provided passwords for role . We embedded passwords into apps . They say its still not secure . Now go for contexts and enable policies. In oracle 9i you can have global context which can be enabled by any session . Now here i am confused .. How does this thing is secure, cuz any session can say my context is "MANAGER' or "CLERK" or whatever . Isn't it back to the roles initially where any session can say heyyy enable role "MANAGER" ( offcourse if its granted ).

-ak

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: AK
INET: oramagic_at_hotmail.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Thu Jul 31 2003 - 16:49:23 CDT