Re: Fine Grain Security and select... for update

In article <am7fka$47k$1_at_nntp-m01.news.aol.com>, "Ronnie says...
>
>Hi,
>
>I am in the process of implementing fine grain security on our databases and
>it works great except for the fact that when it comes to Lobs it doesnt seem
>to work, especially in case of updates.
>
>Is it a known issue or am I doing something wrong.
>
>In my database certain users can see a record but cannot update it.
>
>The problem is when trying to update a clob field I need to do a select
>for... update and this selects the row for update irrespective of the
>security on it. This is because the user has select rights on the row . But
>the user should not be able to issue a select ... for update because he/she
>does not have update rights on the row.
>
>Now using dbms_lobs.write the user can write into a lob field even if he
>does not have priveleges to do it.
>Please suggest.
>
>Thanks
>Ronnie
>
>

I filed a bug on this, 2597431 -- those with tars can update the tars with that bug# i suppose. It is an in progress bug now.

--
Thomas Kyte (tkyte@oracle.com)             http://asktom.oracle.com/ 
Expert one on one Oracle, programming techniques and solutions for Oracle.
http://www.amazon.com/exec/obidos/ASIN/1861004826/  
Opinions are mine and do not necessarily reflect those of Oracle Corp