RE: Ids and passwords for application users

--Create roles for the possible user types.
--Grant permissions to the roles.
--Create induhvidual lusers in the database.
--Assign the appropriate role to the appopriate luser.

Anything else can quickly become a maintenance/monitoring nightmare. This is why roles were "rolled" out.

Scott Shafer
San Antonio, TX
210-581-6217

> -----Original Message-----
> From: Schauss, Peter [SMTP:SCHAUPE_at_mail.northgrum.com]
> Sent: Monday, July 29, 2002 3:59 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Ids and passwords for application users
>
> I am in the process of designing a small database which may have
> as many as 250 to 300 users. We are reaching a stage where we need
> to decide how we will control access to this database. As I see it
> we have two options:
>
> 1. Provide a single hidden login for the entire application and control
> access to the applicaiton itself either by "roll your own" security or
> using the operating system (UNIX) controls.
>
> 2. Create ids for the users in Oracle and grant them access
> to the necessary tables using roles.
>
> Any opinions or alternate suggestions?
>
> thanks,
>
> Peter Schauss
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Schauss, Peter
> INET: SCHAUPE_at_mail.northgrum.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Scott.Shafer_at_dcpds.cpms.osd.mil

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).