Home » RDBMS Server » Server Administration » Install/componet/init.ora pre-recs for Fine Grained Access (Row Level Security) (9i - Windows, Linux, Linux/VM)
Install/componet/init.ora pre-recs for Fine Grained Access (Row Level Security) [message #340396] Tue, 12 August 2008 10:50 Go to next message
WolfBrother
Messages: 10
Registered: June 2006
Location: Austin, TX
Junior Member
We have an application provided by a vendor that is configured to use FGAC (RLS). We are using 9.2.0.8 Enterprise edition. We want to know exactly what Oracle software (at software install time), and what components (at database create time), and what initialization parameters (at instance startup time) are a pre-requisite for FGAC (RLS) to work correctly. Please note, this is not Label Security.

Our normal install methodology is to only install what is specifically required and not go with all the defaults. Using one such install, we are experiencing very long response times on some queries only when executed by accounts that are not the schema owner. That is to say, those accounts that would be impacted by the vendor delivered FGAC (RLS) restrictions.

We suspect that some required component is missing because the system privilege "EXEMPT ACCESS POLICY" does not appear in our system. We were going to use that privilege on the problem account just as a test, but the fact that it is missing may be a clue.


We have another system that does have this privilege and using it the problem account does return results for the query quickly. The same account also works quickly without that privilege when we set the following:

query_rewrite_enabled='TRUE'
query_rewrite_integrity='TRUSTED'

We are trying to understand the requirements for FGAC (RLS) to work correctly without relying on the "black-box' install everything and hope it works approach.

Re: Install/componet/init.ora pre-recs for Fine Grained Access (Row Level Security) [message #340404 is a reply to message #340396] Tue, 12 August 2008 11:39 Go to previous message
Michel Cadot
Messages: 64111
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
http://www.oracle.com/pls/db102/search?remark=quick_search&word=fine+grained+access+control&tab_id=&format=ranked

Regards
Michel
Previous Topic: CREATE DATABASE test DATAFILE 'j:\data\test\systemp.dbf' size 10m EXTENT MANAGEMENT LOCAL ;
Next Topic: touch count problem (plz.....)
Goto Forum:
  


Current Time: Mon Dec 05 14:46:14 CST 2016

Total time taken to generate the page: 0.11841 seconds