Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Label Security and execution plans...

Re: Label Security and execution plans...

From: Tim Arnold <timkarnold_at_comcast.net>
Date: Mon, 17 Jan 2005 11:07:00 -0500
Message-ID: <4oadnbkYaZbzf3bcRVn-3A@comcast.com>

"Kamal" <kamal80_at_virgilio.it> wrote in message news:4e766a02.0501140638.196b816a_at_posting.google.com...
> Hi everybody.
>
> In my db, 9iR2, there are some tables with label security enforced.
> The label field is called "label" (very original).
> For example I have a user ("john") who has a default label = 5000.
> I presume that if he makes a query like "select * from t where id = 1"
> the system would add only "and label = 5000".
> But there must be something I miss because if I query the db using the
> label security administrator (lbacsys) with "select * from t where id
> = 1 and label = 5000" the execution plan that I obtain from explain
> plan is very different from the one obtained by john.
> So john and lbacsys obtain the same results from the query but john
> waits several minutes and lbacsys only some seconds.
>
> Can anyone explain this?
>
> Thank you very much.
>
> Kamal

There is a discussion at:
http://www.securityfocus.net/infocus/1744 Received on Mon Jan 17 2005 - 10:07:00 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US