Re: Fine Grained Access Control

Can you clarify this.
Are you trying to create a function which generates the string:

        T.ID IN
   ( SELECT P.ID
    FROM PRIVILEGIES P
    WHERE P.READ_OWN = 'Y' )
AND
  CODE IN
  ( SELECT M.CODE
    FROM MAPPING M,
          PRIVILEGIES P
    WHERE M.CODE = P.CODE
      AND T.ID = P.ID ); so that you can attach it to just about
any table, or to just one specific table ?

--

Jonathan Lewis
Yet another Oracle-related web site:  http://www.jlcomp.demon.co.uk

ovind osengen wrote in message <8snaor$dmc$1_at_oslo-nntp.eunet.no>...


>I am designing a security mechanism with the fine grained access control.

>The filter should basically look like:

>

>SELECT T.ID, T.CODE, T.NAME

>FROM TABLE T

>WHERE T.ID IN

>  ( SELECT P.ID

>    FROM PRIVILEGIES P

>    WHERE P.READ_OWN = 'Y' )

>AND

>  CODE IN

>  ( SELECT M.CODE

>    FROM  MAPPING M,

>          PRIVILEGIES P

>    WHERE M.CODE = P.CODE

>      AND T.ID = P.ID );

>

>However the security policy function only returns the predicate, but this

>cause T.ID in the 3rd select statement to be undefined. How can this be

 done


>better?

>

>

>Best Regards

>Ovind

>

>oeo_at_rocketmail.com

>

>

>