RE: Authorete

From: Jacques Kilchoer <Jacques.Kilchoer_at_quest.com>
Date: Thu, 11 Mar 2004 14:35:55 -0800
Message-ID: <B5C5F99D765BB744B54FFDF35F602621033DAF34@irvmbxw02>

The "set current_schema" option was not for security reasons but to eliminate the need for the creation of all those synonyms.

-----Original Message-----

April Wells

no, I don't think that will give me what I'm really after...

The idea is to tie the hands of the programmers to such an extent that I KNOW what they can and can not do... and how bad they can put me in a bind.

-----Original Message-----

From: Jacques Kilchoer [mailto:Jacques.Kilchoer_at_quest.com]

Would it also work to create a logon trigger that does an "alter session set current_schema = " instead of creating synonyms?

-----Original Message-----

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org]On Behalf Of April Wells

Ended up having to create case sensitive synonyms (upper case version, lower case version) on the double quoted table structures or the user couldn't log in.

Granting is easy... aliasing is the interesting part.

Try create synonym user on whoever.user Oracle tends to get testy.

-----Original Message-----

From: Richard Stevenson
I guess dump software from vendors that don't understand reserved words wouldn't cut it?

Seriously, wouldn't granting all privileges on the objects to another user work ?

Original Message ----- From: April Wells < <mailto:AWells_at_csedge.com> mailto:AWells_at_csedge.com> Has anyone worked with Authorete software against an Oracle database before?

I am trying (silly me) to impose some security on this product, and they have tables called... user... privilege... group... session... and I need to have the tables owned by one user while another user can SUID the data, but not affect the table structure (got burned on financials implementation with customizations... ) and it is geeking out when the user tries to log into the front end...

Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html


-----------------------------------------------------------------

Received on Thu Mar 11 2004 - 17:32:35 CST