Re: revoking a column

Row Read Restriction works well, the predicate logic can be applied to any transaction statement (e.g., SELECT) for a given user so that you can have a row level permission within any table using row level security and ignore for tables where table level security is acceptable. From a data structure point of view the following:

MY_APP_USER_INFO
myAppUserName
myAppUserNumber

MY_APP_USER_BY_RRRC
myAppUserNumber
myAppRowPersmissionNumber

MY_APP_DATA
myDataFiled(s)
myAppRowPersmissionNumber

Have a great day,
mikejay

Sybrand Bakker wrote:
>
> "Chirag (Mark) Patel" <patelc_at_mcss.cas.mcmaster.ca> wrote in message
> news:Pine.LNX.4.10.10104301034530.30204-100000_at_mcss.cas.mcmaster.ca...
> >
> > I would like to know if it is possible to revoke a spefic column in one of
> > my Lookup Tables. For example, I have a lookup table with 4 codes (w/
> > Description). One of the codes is "4" called "Task Tracking". I want to
> > provoke certain users from having access to this option. Is it possible
> > to revoke access to certain users where the code is equal to 4?
> >
>
> There are two solutions to this problem:
> - Creat a view on the lookup table, excluding your code 4, granting other
> users access to the view only.
> Of course, this is a static solution and the list of codes has to be limited
> - Implement Row Level Security (aka RLS) by using the dbms_rls. In that
> case you will implement access policies, and get a dynamic solution.
>
> Regards,
>
> Sybrand Bakker, Oracle DBA
Received on Fri May 18 2001 - 10:20:50 CDT