Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: SQL question avoiding 2 views and not in

RE: SQL question avoiding 2 views and not in

From: <JApplewhite_at_austin.isd.tenet.edu>
Date: Fri, 13 Dec 2002 15:03:46 -0800
Message-ID: <F001.00519AE4.20021213150346@fatcity.com>

Lisa,

A couple of years ago, when I was a consultant, I implemented Application Context and Fine-Grained Access Control, AKA Row Level Security for a client.

Since it causes a predicate to be appended to the Where clause of every SQL statement issued against the tables having a Security Policy, I guess performance could be impacted if you didn't index the columns referenced by the appended predicates. We never noticed a bit of degradation in our testing, but we were careful about the indexing.

I left that project before it went into production, so I don't know the ultimate outcome. However, I'd sure use FGAC again, if the need arises, it works very well. Actually, I probably *will* use it on a couple of our 3rd Party apps here which don't enforce security to the degree that we require. I'll let y'all know how it performs.

Jack C. Applewhite
Database Administrator
Austin Independent School District
Austin, Texas
512.414.9715 (wk)
512.935.5929 (pager)
JApplewhite_at_austin.isd.tenet.edu

                                                                                                           
                      "Koivu, Lisa"                                                                        
                      <Lisa.Koivu_at_efair        To:       Multiple recipients of list ORACLE-L              
                      field.com>                <ORACLE-L_at_fatcity.com>                                     
                      Sent by:                 cc:                                                         
                      root_at_fatcity.com         Subject:  RE: SQL question avoiding 2 views and not in      
                                                                                                           
                                                                                                           
                      12/13/2002 03:38                                                                     
                      PM                                                                                   
                      Please respond to                                                                    
                      ORACLE-L                                                                             
                                                                                                           
                                                                                                           



Has anyone used context and fine-grained security? I seem to remember the performance hit was not minimal when using this functionality.

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
  INET: JApplewhite_at_austin.isd.tenet.edu

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Fri Dec 13 2002 - 17:03:46 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US