Re: ROLE PW Encryption

"Nicolas Bronke" <N.Bronke_at_web.de> wrote in message news:3le3d2F126gj4U1_at_individual.net...

...

> To create the role like
>> create role oe_admin
>> identified using oe_admin_validate;
> works only with 9i and not with 8i as I read. But perhaps I am wrong with
> that.
> But nevertheless the the user can initiate the command with any tool ang
> get access, and this should not happen.
>
> Does I am wrong?
>
> Regards
> Nicolas
>

yes, that is a 9i feature (which is why it's a good idea to post your RDBMS version with your question)

yes, the user can execute the role-enabling procedure from any tool, but the procedure can check anything it wants to in the Oracle environment, so if the user is not running the application, the procedure can raise an exception rather than enable the role

++ mcs Received on Thu Aug 04 2005 - 06:09:37 CDT