RE: Column Access

From: Burton, Laura <BurtonL_at_frmaint.com>
Date: Fri, 11 Mar 2005 17:17:46 -0600
Message-ID: <B5E0B4818A669C49A9C22199D9C389F8039181B0@MAIL.frmaint.com>

Thanks for everyone's response. I should have noted that it is a 'canned' package that is being used to access the table so a view would not work in this situation. I will look at the Fine Grained Access Control that a few of you suggested. We are using 8i so hopefully this will be an option.

Thank you again,
Laura

-----Original Message-----
From: Paul Drake [mailto:bdbafh_at_gmail.com]=20 Sent: Friday, March 11, 2005 3:20 PM
To: Burton, Laura
Cc: Oracle-L (E-mail)
Subject: Re: Column Access

Laura,

What you might be after is "Fine Grained Access Control" or "Virtual Private Database".
http://www.oracle.com/technology/oramag/oracle/04-mar/o24tech_security.h tml

This is available as an option on top of Enterprise Edition.=20 What version of the database software are you using?

Its easy to confuse Fine Grained Auditing (FGA) which is included in Enterprise Edition, with Fine Grained Access Control (FGAC), but that is Oracle terminology for you.

other papers are available at Pete Finnigan's site: http://www.petefinnigan.com/orasec.htm
http://www.securityfocus.com/infocus/1743

hth.

Paul

On Fri, 11 Mar 2005 13:36:41 -0600, Burton, Laura <BurtonL_at_frmaint.com> wrote:

>=20

> I have read where you can grant access to a column to a user/role. I
> need to take it one step further. I need to restrict access to the
> column if it is for a certain group of people. i.e. I have
supervisors
> and mechanics. Everyone can look at the salary column, except that
> mechanics can only look at mechanics, but supervisors can look at
> everyone. Can this be done with grants? The alternative is two
> separate databases and that seems extreme. If not with a grant is
there
> a better way?

>=20

> =3D20

>=20

> Thank you,

>=20

> Laura

>=20

> --
> http://www.freelists.org/webpage/oracle-l
>=20

--=20
#/etc/init.d/init.cssd stop
# f=3Dma, divide by 1, convert to moles.

--
http://www.freelists.org/webpage/oracle-l

Received on Fri Mar 11 2005 - 18:21:09 CST