Re: Column Access

From: Mladen Gogala <gogala_at_sbcglobal.net>
Date: Sat, 12 Mar 2005 07:31:10 +0000
Message-Id: <1110612670l.5076l.0l@medo.noip.com>

On 03/11/2005 04:20:26 PM, Paul Drake wrote:
> Laura,

>=20

> What you might be after is "Fine Grained Access Control" or "Virtual
> Private Database".
> http://www.oracle.com/technology/oramag/oracle/04-mar/o24tech_security.ht=
ml

>=20

> This is available as an option on top of Enterprise Edition.=20
> What version of the database software are you using?

>=20

> Its easy to confuse Fine Grained Auditing (FGA) which is included in
> Enterprise Edition, with Fine Grained Access Control (FGAC), but that
> is Oracle terminology for you.

>=20

> other papers are available at Pete Finnigan's site:
> http://www.petefinnigan.com/orasec.htm
> http://www.securityfocus.com/infocus/1743

A source that also deserves mentioning is Arup Nanda's book about privacy and HIPAA: "Oracle Privacy Security Auditing", published=20 by Rampant Books. It doesn't have much about mechanical parts, it's devoted to HIPAA and SoX and Oracle techniques that can be used to achieve compliance with those two laws. It also gives a detailed explanation of FGAC, along with numerous examples and code snippets. That book should be used in addition to Pete Finnigan's site, which is a real cornucopia of useful security advice. Note 207959.1 is also a mandatory reading.

--=20
Mladen Gogala
Oracle DBA

--
http://www.freelists.org/webpage/oracle-l

Received on Sat Mar 12 2005 - 02:34:34 CST