Re: Should I let Oracle handle user accounts?

From: Simon Hedges <>
Date: Wed, 5 May 1999 00:56:28 +0100
Message-ID: <7go1ao$otv$>

I also rely on Oracle user accounts. With Oracle 8, I believe that the options are
improved (e.g. expiry dates on passwords etc).

However, I also have a table 'valid users' which contains info about each user
(name, phone number etc), and also certain information (delivery address for any centrally produced address, date of last login etc).

This table could be added to, to store various user preferences, lists of recently select dated etc.

This hybrid solution works well. When auditing data, it's far far easier to use the Oracle username system and pick up the username that way. However, if using database security, and grants on tables etc should be done via role rather than via user - this makes the management of large numbers of users far easier.

Simon Hedges

>Tiernan wrote:
>> We are writing a GUI which will connect to Oracle v8.0.4 and now it's
time to
>> decide. Do we create our own user table (containing fields such as
>> password, level etc) and manage the concept of users ourselves or do we
>> Oracle accounts for each user and have the GUI log in under each user's
>> account?
>> The last time I used Oracle we were on v7.3.4 so I'm concerned trhat
>> are many benefits to the Oracle account approach I'm unaware. Here is
what I
>> see as advantages and disadvantages to the Oracle account approach:
>> ADVANTAGES: No need to design user tables or write code to perofrm
>> validation. We would effectively be able to audit users by auditing
>> user accounts (a requirement is that we can trace actions to users).
>> Resolving locks would be easier? DISADVANTAGES: May not be able to meet
>> future needs (of course they're undefined :).
>> Has anyone else considered this issue? What factors did you see as most
>> important? What route did you choose in the end (and do you regret it)?
>> All help gratefully received.
>> Thanks,
>> Tee.
>> -----------== Posted via Deja News, The Discussion Network ==----------
>> Search, Read, Discuss, or Start Your Own
Received on Wed May 05 1999 - 01:56:28 CEST

Original text of this message