Some reasons to ensure that each app user has a unique database userid:
- exploit the built-in row-level security (somewhat lifted in 10g);
- the database auditing capability;
- kill sessions knowing which user's session you terminate.
Some reasons to avoid that:
- easier to program initially;
- you feel comfortable that end users will never bypass the app and use
something like ODBC/DAO/JDBC (eg: with Access or Excel) and will never
have to worry about uncontrolled data changes.
--
Hans Forbrich
Canada-wide Oracle training and consulting
mailto: Fuzzy.GreyBeard_at_gmail.com
*** I no longer assist with top-posted newsgroup queries ***
Received on Sun May 29 2005 - 18:44:55 CDT
