Re: horns of a dilemma

From: Simon Hedges <shedges_at_hhhh.freeserve.co.uk>
Date: Mon, 28 Jun 1999 21:14:24 +0100
Message-ID: <7l8lmm$rh8$1_at_news7.svr.pol.co.uk>


<rmr_phor_com_at_my-deja.com> wrote in message news:7l8046$ht2$1_at_nnrp1.deja.com...
>
>
> We're caught on the horns of a dilemma.
>
> Middle management favors organizing our customers' data in
> separate areas, under separate id's. This would keep roles
> naturally separate: user cust1 couldn't see data in the tables
> of user cust2. It would also simulate directory structure.
>
> The DBA favors organizing all tables in the space of one userid,
> and granting roles to ensure security. This should take care of
> security, but it doesn't simulate directory structure.

You could try saving all data in shared tables (installed under one user) and have a
'username' column in the table. You could then create views on the table 'where username = 'MYUSERNAME' - one view for each user. Ensure that access is granted only via the views. You can update these views. The views
could either be stored in the central shared area where the tables are, or could
be stored in the individual user schemas.

If you want to simulate a full datastructure, you can use a 'pig's ear' recursive relation (connect by, start with) etc to build a hierarchy, but this is a bit of a pig to code for.

Simon Hedges
Gloucester
UK Received on Mon Jun 28 1999 - 22:14:24 CEST

Original text of this message