Re: Column level security

From: Arup Nanda <orarup_at_hotmail.com>
Date: Mon, 23 Jun 2003 06:46:47 -0700
Message-ID: <F001.005B78F6.20030623061918@fatcity.com>

Are you referring to give grants based on columns. You could use ON COLUMN syntaxt in the grant statemetnt for INSERT, REFERENCES, UPDATE.

If this is not acceptable, then other option is using views for each user type and based on the user's priviege type. For instance, you may have a table called CREDIT_CARDS, and you want to display the card numbers if the user is a manager, just last 4 digits if analyst and nothing, if anybody else.

create view ..
as
select ...,

decode(emp_type,

      'MANAGER',cc_num,
      'ANALYST',substr(cc_num,13,4),
      null) cc_num

from CREDIT_CARDS cc, EMP e
....

Join this with VPD and you just got yourself a dynamic view which presents information selectively.

HTH. Arup

Original Message ----- To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> Sent: Monday, June 23, 2003 7:04 AM

>
> Dear All,
>
> Is there any way to implement column level security in Oracle 9i
> database ?
>
> Information on having row level security through VPD is available. But
> is it possible to have column level security ?
>
> I have seen in some sites,like
> (http://www.ftt.co.uk/C520_outline.html,
> http://www.actisit.com/outlines/forms/Or202_Or9i%20DBA%20I%20outline.pdf)
>
> mentioned about column level security.
>
> Can someone help me in this regard?
>
>
> Pradeep
>
>
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Pradeep Kumar G
> INET: [EMAIL PROTECTED]
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Arup Nanda
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Mon Jun 23 2003 - 08:46:47 CDT