Re: Q: Oracle7 & Row level security...

From: Dennis Wetherell <Wetherellm#m_Dennis_G_at_msmail.aai.arco.com>
Date: 1995/05/12
Message-ID: <D8H1tL.1so_at_news.arco.com>#1/1


In article <3oqehk$53n_at_romulus.ott.hookup.net> Brian Graham, GrahamB_at_psac.com writes:
>In article <3ono2j$4tv_at_ttis.thomtech.com>, Dave H  <dheissner_at_thomtech.com> says:
>>
>>Hi,
>>I am curious to know what approaches people are using to implement
>>row level security on an Oracle7 table without spliting the table
>>into separte tables with the same structure.
>>
>>Thanks in advance!
>>
>>Dave H. - dheissner_at_thomtech.com
>>

We have used the following approach:

Create a security table to xref user and groups that user can see/edit.

Within the data tables create a column for group.

Create a view on the tables in the form of

    select x, y, z from table where group in (select group from security table where user_id = USER);

Through this mechanism we store data from all groups in a single set of tables - but users can only see the data to which they have been authorized in the user/group xref table.

Dennis Wetherell
Wetherell#m#_Dennis_G_at_msmail.aai.arco.com Received on Fri May 12 1995 - 00:00:00 CEST

Original text of this message