RE: Security Issue in Oracle 9.2.0.3 DB

From: Charu Joshi <joshic_at_mahindrabt.com>
Date: Wed, 20 Oct 2004 15:25:19 +0530
Message-ID: <MHEAIPLKCACENJKNJIALCEDJCIAA.joshic@mahindrabt.com>

What's the problem with having two separate schemas A & B. You will need to follow strict object naming conventions, that would differentiate between objects belonging to different schemas. With carefully designed naming conventions, synonyms, roles and grants you should be able to achieve this.

Good luck,
Charu.

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]On Behalf Of Charlotte Hammond Sent: Wednesday, October 20, 2004 3:16 PM To: ORACLE-L
Subject: Re: Security Issue in Oracle 9.2.0.3 DB

Hi,

If your application is simple/small enough (and you really only have A & B and this will never grow to include C, D, E etc) then you should be able to do what you need simply using Views and granting security on the Views (use the CHECK option to prevent A updating data belonging to B and vice versa).

For anything more complex you should look at Fine-Grained Access Control
(FGAC) in the manuals. This uses the DBMS_RLS package to define access
policies for tables.

Hope this helps,
- Charlotte

dear friends
we have one database on oracle9.2.0.3 and we have two compnies (Say A and B) both are using the same database .
Now i want that A employess should not able to view or select or update or insert any thing on B releted tables .
and vice versa ..
please guide me
With Best Wishes & Prayers,
Abhishek Saxena.
Mail - abhisheks_at_kpitcummins.com
Tel - +91 20 25458277.
Mob - +91 20 33306103.
www.kpitcummins.com
(A SEI CMM Level 5 Company)

Do you Yahoo!?
Express yourself with Y! Messenger! Free. Download now.

--
http://www.freelists.org/webpage/oracle-l


*********************************************************
Disclaimer:          

This message (including any attachments) contains 
confidential information intended for a specific 
individual and purpose, and is protected by law. 
If you are not the intended recipient, you should 
delete this message and are hereby notified that 
any disclosure, copying, or distribution of this
message, or the taking of any action based on it, 
is strictly prohibited.

*********************************************************
Visit us at http://www.mahindrabt.com

--
http://www.freelists.org/webpage/oracle-l

Received on Wed Oct 20 2004 - 04:51:26 CDT