Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Usenet -> c.d.o.server -> Re: 9i Partitioned Fine Grain Access Control ?
Howard,
thank you for putting this in clear simple terms.
Your scenario is easy to follow.
The salesmanContext is for a salesman.
A salesman can view the orders of his customers.
Simple enough.
My understanding falls to pieces when I try a mental connection of calls to DBMS_RLS pkgd procedures to your scenario.
I assume I start with something like this during application deployment:
CREATE TABLE orders...
CREATE CONTEXT salesmanContext...
Then, after deployment,
I make calls to some pkgd procedures...
DBMS_SESSION.SET_CONTEXT
DBMS_SESSION.SET_IDENTIFIER
SYS_CONTEXT -- this allows my session to query certain things?
DBMS_RLS.ADD_POLICY DBMS_RLS.ADD_POLICY_CONTEXT DBMS_RLS.ADD_GROUPED_POLICY DBMS_RLS.CREATE_POLICY_GROUP
I'm not sure how to use the above 5 procedures to implement FGAC to the orders table for the salesmanContext.
This is interesting stuff; I'm sure that a simple scenario based explanation will bolster my understanding.
Alan Received on Sun Apr 14 2002 - 01:01:49 CDT