Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: 9i Partitioned Fine Grain Access Control ?

Re: 9i Partitioned Fine Grain Access Control ?

From: Alan <alainrtv_at_yahoo.com>
Date: 13 Apr 2002 23:01:49 -0700
Message-ID: <fbee32ac.0204132201.41a3240b@posting.google.com>


Howard,
thank you for putting this in clear simple terms. Your scenario is easy to follow.

The salesmanContext is for a salesman.
A salesman can view the orders of his customers. Simple enough.

My understanding falls to pieces when I try a mental connection of calls to DBMS_RLS pkgd procedures to your scenario.

I assume I start with something like this during application deployment:

CREATE TABLE orders...
CREATE CONTEXT salesmanContext...

Then, after deployment,
I make calls to some pkgd procedures...

DBMS_SESSION.SET_CONTEXT

DBMS_SESSION.SET_IDENTIFIER

SYS_CONTEXT -- this allows my session to query certain things?

DBMS_RLS.ADD_POLICY 
DBMS_RLS.ADD_POLICY_CONTEXT 
DBMS_RLS.ADD_GROUPED_POLICY
DBMS_RLS.CREATE_POLICY_GROUP

I'm not sure how to use the above 5 procedures to implement FGAC to the orders table for the salesmanContext.

This is interesting stuff; I'm sure that a simple scenario based explanation will bolster my understanding.

Alan Received on Sun Apr 14 2002 - 01:01:49 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US