Re: Object privilege at row level?

On Fri, 25 Jul 2003 00:03:38 +0200, Sybrand Bakker <postbus_at_sybrandb.demon.nl> wrote:

>
> "Rick Denoire" <100.17706_at_germanynet.de> wrote in message
> news:22l0iv0tp71jjl3vs908ng5gc625qj0vf8_at_4ax.com...
>> Is there a way (using Oracle 9.2.0) to control access to rows of a
>> table? (Instead of granting access to the whole table)
>>
>> Can one at least monitor access to certain rows of a table?
>> That is, is it possible to protocol who and when accessed certain
>> rows?
>>
>> Thanks
>> Rick Denoire
>
> Yes, using Fine Grained Access Control, Row Level Security, Virtual
> Private
> Database, or whatever the most recent marketing term is. Available in EE
> only.
> FGAC comes with Fine Grained Auditing.

Eh?

FGAC has absolutely nothing to do with FGA. Nothing. As much as a pea has to do with a carrot.

The fact that both come with 9i is mere incidental.

So does automatic undo and automatic PGA, but I bet you wouldn't join those two in the same sentence.

FGAC uses dbms_rls, and fine-grained auditing uses dbms_fga. And the relationship between these two packages would be....??

Here's a clue: Row-Level Security works even if you haven't the faintest idea what VPD is, and have never even thought of implementing it.

Before you slag off 1.1 billion people, Sybrand (ie, the Indians you abused the other day)... how about learning the basics for yourself?

God preserve us from Senior DBAs who think they're the bees-knees, but actually are just sad old bastards who haven't a clue (or, probably more accurately, had a lot of clue in 7.2, but who have been becoming steadily more and more out-of-date since then, and steadily more and more grumpy as a result).

~QM Received on Thu Jul 24 2003 - 23:19:57 CDT