RE: Ids and passwords for application users

From: DENNIS WILLIAMS <DWILLIAMS_at_LIFETOUCH.COM>
Date: Mon, 29 Jul 2002 13:54:06 -0800
Message-ID: <F001.004A5457.20020729135406@fatcity.com>

Peter - Go with option #1 unless you relish a career as an Oracle security officer. With option #1 the developers can create some administrator screens. Unless security is really, really critical. Dennis Williams
DBA
Lifetouch, Inc.
dwilliams_at_lifetouch.com

-----Original Message-----
Sent: Monday, July 29, 2002 3:59 PM
To: Multiple recipients of list ORACLE-L

I am in the process of designing a small database which may have as many as 250 to 300 users. We are reaching a stage where we need to decide how we will control access to this database. As I see it we have two options:

1. Provide a single hidden login for the entire application and control access to the applicaiton itself either by "roll your own" security or using the operating system (UNIX) controls.
2. Create ids for the users in Oracle and grant them access to the necessary tables using roles.

Any opinions or alternate suggestions?

thanks,

Peter Schauss
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Schauss, Peter
  INET: SCHAUPE_at_mail.northgrum.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: DENNIS WILLIAMS
  INET: DWILLIAMS_at_LIFETOUCH.COM

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Jul 29 2002 - 16:54:06 CDT