Home » RDBMS Server » Security » Oracle Label Security - Insert Operation (Oracle 11g)
Oracle Label Security - Insert Operation [message #505206] Sat, 30 April 2011 06:21
informatikus
Messages: 1
Registered: April 2011
Junior Member
Hello everybody!

My question is about the INSERT-operation on tables which are protected by Oracle Label Security.

Source for the rules for access control:
www.stanford.edu/dept/itss/docs/oracle/10g/network.101/b10774.pdf
On page 76/338: Read-Control rules
On page 78/338: Write-Control rules

Write-Control comprises Update-, Insert- and Delete-operations.

When read-control is applied and also when write-control is applied (in both cases), the data-level is compared with the user-level.

This comparison (data-level vs. user-level) is possible on Select-, Update- and Delete-operations, because the data-label aleady exists.

But I don't understand how it works an Insert-operations:
When I write a new row, I can't compare the data-level with the user-level, because the label does not yet exist!
How can I apply the rule on page 78/338 then?

Or does the label-column contain a default label for all unused/empty rows?

Thank you very much for help!
I'd really like to understand that point..

Greetings.

[Updated on: Sat, 30 April 2011 10:10]

Report message to a moderator

Previous Topic: Populating CLIENT_ID column in DBA_AUDIT_SESSION
Next Topic: Doubt in DBMS_RLS!
Goto Forum:
  


Current Time: Sat Aug 30 00:06:27 CDT 2014

Total time taken to generate the page: 0.09315 seconds