Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Fine Grain Security and select... for update

Re: Fine Grain Security and select... for update

From: Ronnie Yours <ronnie_yours_at_yahoo.com>
Date: Mon, 30 Sep 2002 16:12:12 -0400
Message-ID: <anab69$r88$1@nntp-m01.news.aol.com>

I also tried accessing the Bug but couldnt. The search results in no records found.

Thanks
Ronnie Yours

"Daniel Morgan" <dmorgan_at_exesolutions.com> wrote in message news:3D987691.469EBB36_at_exesolutions.com...
> Thomas Kyte wrote:
>
> > In article <am7fka$47k$1_at_nntp-m01.news.aol.com>, "Ronnie says...
> > >
> > >Hi,
> > >
> > >I am in the process of implementing fine grain security on our
databases and
> > >it works great except for the fact that when it comes to Lobs it doesnt
seem
> > >to work, especially in case of updates.
> > >
> > >Is it a known issue or am I doing something wrong.
> > >
> > >In my database certain users can see a record but cannot update it.
> > >
> > >The problem is when trying to update a clob field I need to do a select
> > >for... update and this selects the row for update irrespective of the
> > >security on it. This is because the user has select rights on the row .
But
> > >the user should not be able to issue a select ... for update because
he/she
> > >does not have update rights on the row.
> > >
> > >Now using dbms_lobs.write the user can write into a lob field even if
he
> > >does not have priveleges to do it.
> > >Please suggest.
> > >
> > >Thanks
> > >Ronnie
> > >
> > >
> >
> > I filed a bug on this, 2597431 -- those with tars can update the tars
with that
> > bug# i suppose. It is an in progress bug now.
> >
> > --
> > Thomas Kyte (tkyte@oracle.com) http://asktom.oracle.com/
> > Expert one on one Oracle, programming techniques and solutions for
Oracle.
> > http://www.amazon.com/exec/obidos/ASIN/1861004826/
> > Opinions are mine and do not necessarily reflect those of Oracle Corp
>
> I can not find this bug# at metalink. Please verify the number.
>
> Thanks,
>
> Daniel Morgan
>
Received on Mon Sep 30 2002 - 15:12:12 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US