Re: Role passwords
Date: Tue, 05 Feb 2008 19:18:32 +0400
Message-ID: <47A87E48.9060101@gmail.com>
Hi Jason,
you can also consider using application based roles, these are enabled
based on rules and checks you define in a program unit that is then
locked with the role. I have got an article on my site.
http://www.amar-padhi.com/oradb_secure_app_roles.html
Thanks!
amar
Jason Heinrich wrote:
> According to the documentation, role passwords are designed to prevent
> users from directly accessing application data without going through
> the application interface. Has anyone used them on human-oriented
> roles, such as DBA? We have a requirement to protect all "critical"
> roles with passwords, but given their shortcomings (no password
> management through profiles, multiple people may need to know the
> password, etc.), it seems to me that they would be more of a
> hinderance than a help. Thoughts?
>
> --
> Jason Heinrich
-- http://www.freelists.org/webpage/oracle-lReceived on Tue Feb 05 2008 - 09:18:32 CST