Re: Should I let Oracle handle user accounts?

I also rely on Oracle user accounts. With Oracle 8, I believe that the options are
improved (e.g. expiry dates on passwords etc).

However, I also have a table 'valid users' which contains info about each user
(name, phone number etc), and also certain information (delivery address for any centrally produced address, date of last login etc).

This table could be added to, to store various user preferences, lists of recently select dated etc.

This hybrid solution works well. When auditing data, it's far far easier to use the Oracle username system and pick up the username that way. However, if using database security, and grants on tables etc should be done via role rather than via user - this makes the management of large numbers of users far easier.

Simon Hedges
Gloucester
UK

>Tiernan wrote:
>
>> We are writing a GUI which will connect to Oracle v8.0.4 and now it's
time to
>> decide. Do we create our own user table (containing fields such as
user_id,
>> password, level etc) and manage the concept of users ourselves or do we
create
>> Oracle accounts for each user and have the GUI log in under each user's
Oracle
>> account?
>>
>> The last time I used Oracle we were on v7.3.4 so I'm concerned trhat
there
>> are many benefits to the Oracle account approach I'm unaware. Here is
what I
>> see as advantages and disadvantages to the Oracle account approach:
>>
>> ADVANTAGES: No need to design user tables or write code to perofrm
password
>> validation. We would effectively be able to audit users by auditing
their
>> user accounts (a requirement is that we can trace actions to users).
>> Resolving locks would be easier? DISADVANTAGES: May not be able to meet
our
>> future needs (of course they're undefined :).
>>
>> Has anyone else considered this issue? What factors did you see as most
>> important? What route did you choose in the end (and do you regret it)?
>>
>> All help gratefully received.
>>
>> Thanks,
>> Tee.
>>
>> -----------== Posted via Deja News, The Discussion Network ==----------
>> http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
>
Received on Wed May 05 1999 - 01:56:28 CEST