Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.misc -> Re: avoid to create public synonyms

Re: avoid to create public synonyms

From: Joel Garry <joel-garry_at_home.com>
Date: 11 Nov 2004 17:02:59 -0800
Message-ID: <91884734.0411111702.1cc4af90@posting.google.com>


"Dietmar Brueckmann" <Dietmar.Brueckmann_at_lycos.de> wrote in message news:<2vek06F2k6eb1U1_at_uni-berlin.de>...
> "Andrew" <ahuntertate_at_icimail.com> schrieb im Newsbeitrag
> news:b165f5d8.0411091054.726db836_at_posting.google.com...
> > "Dietmar Brueckmann" <Dietmar.Brueckmann_at_lycos.de> wrote in message
> news:<2vbjkoF2j8hemU1_at_uni-berlin.de>...
>
> > From a management aspect your DBA is correct. Creating one (1)
> > public synonym per table and managing access through roles is much
> > more manageable than creating Private synonyms for each user. What
> > exactly are you trying to prevent/ allow for your users? If you need
> > to dynamically determine what the users should have access to look at
> > Virtual Private Databases(VPD) / Fine Grained Access Control(FGAC) on
> > OTN
> >
> > If security is your concern check the following white paper. It does
> > not directly address this but may give you some more ideas.
> >
> http://www.oracle.com/technology/deploy/security/oracle9i/pdf/9ir2_checklist
> .pdf
> >
>
> I've looked at this papers - thanks.
>
> But my simple problem is to avoid modifing my aplications-SELECT/INSERT etc.
> for testcase:
>
> Testdata for me
> SELECT * from A_TEST_SCHEMA.A_TABLE;
>
> and for production:
> SELECT * from A_SCHEMA.A_TABLE;
>
> I'd like to write everytime:
> SELECT * from A_TABLE;
> to prevent me for making mistakes in modifying SQL-strings.
>
> For that I need synonyms. In using public synonyms I'd be afraid of mixing
> "hot" data to my test-schema.
> select * from a_table - sees it the table A_TABLE or because of synonym
> A_SCHEMA.A_TABLE.
>
> Possibly I can use "SYS_CONTEXT Function" as shown in one of the articles.
> But the easy readability of my SQL-statements is the highest important
> thing.
> Thats why I'm thinking I'm going on to generate all private synonyms are
> necessary.
> But I've asked. Thanks for answering me.

You didn't ask, but you might tell your DBA to look at the discussion about performance of private v public synonyms at www.ixora.com.au

jg

--
@home.com is bogus.
Funnel cakes - donuts with a touch of chaos theory
Received on Thu Nov 11 2004 - 19:02:59 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US