Re: Trusted Oracle

"Paul Brewer" <paul_at_paul.brewers.org.uk> wrote in news:3e1f3a9d_2_at_mk-nntp- 1.news.uk.worldonline.com and I quote:

>
> Hardly surprising, really; the obvious assumption being that the rest of us
> would be relying on 'Untrusted Oracle'.

Heh! :D

>
> I think the marketing people call it 'Oracle Label Security' nowadays.

It's been called Label Security for ages. They have added VPD (Virtual Private Database) in 8i. It actually is quite nifty: you define a PL/SQL function that returns a WHERE predicate to be added to any SQL against a given table. Then you associate the function with a table via a policy. And presto: you now have a "trigger-like" security check, tailor-made to you, active on any SQl on that table. And you can access context variables to customise the execution of the function.

Been playing around with it and it works quite well. Bit fiddly to setup, but once in place it works well.

-- 
Cheers
Nuno Souto
nsouto_at_optusnet.com.au.nospam