Re: Please Help!!! - Security Concern

Rename your table_A to table_A_all, and create a view:

create or replace view table_A as
select * from table_A_all all
where exist (select ' '

                    from user_table
                    where UserName = user
                    userID = substr(all.case_no,1,1))

in this view users only see their own records.

Jack

On Tue, 4 Jan 2000 03:16:03 -0500, "cconway" <conway-ce_at_erols.com> wrote:

>I have four users who can insert, update, delete, and select on Table_A
>using form Case. Each record in Table_A has the field case_no, varchar2(8)
>and it is the primary key.
>
>Each user is associated with a certain set of records. For example, user 1
>are responsible for only those records that have case_no starting with the
>letter 'C' (C0000000) in the first position of Table_A.case_no, user 2
>responsible for records with 'T' in that position, user 3; 'W', and user 4
>the letter 'N.'
>
>My question is, since all users use Table_A, what code is required to allow
>each user the ability to change only those records they are responsible for.
>
>I've created the following table to identify each user to the system:
>
>UserName UserID
>
>user1 C
>user2 T
>user3 W
>user4 N
>
>Thanks in advance for any assistance.
>
>
>
>
Received on Tue Jan 04 2000 - 08:34:03 CST