Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Usenet -> c.d.o.server -> Re: Oracle database validating password
On 14 May 2006, martha123456_at_hotmail.co.uk wrote:
> Hi, this is my first post to this group.
>
> I have a webservice that receives a username and password for an
> Oracle database over https (eg. scott/tiger). I communicate with the
> database using a different username and password from my webservice
> code (eg. webservice001/ijHHGuy762) and there is only one
> connection. I want to validate the scott/tiger pair passed in the
> webservice with Oracle using the connection I made with
> webservice001/ijHHGuy762 and see whether it is valid before returning
> table information. I want to do it like this as I do not want to have
> a separate connection for every user and connecting as a new user each
> time is very slow.
>
> Without connecting to Oracle as scott/tiger, is there a
> package/procedure in Oracle I can call connected as
> webservice001/ijHHGuy762 to verify scott/tiger is valid.
>
> I am running Windows 2003 Web Edition and Oracle XE.
There is a thing called a proxy user. You can define your webservice001 connection and give him the only privilege of "acting on behalf of others". He can pass the credentials of scott/tiger to Oracle and then the credentials of scott/tiger can take over for the subsequent queries.
-- Galen BoyerReceived on Sun May 14 2006 - 22:54:02 CDT