Re: DB privilege management utility wanted

David Trahan wrote:
>
> slc_at_stevensons.co.nz (Steve Chell) wrote:
>
> >Hi all. I'm looking for recommendations for
> >a utility that will facilitate the management
> >of database system privileges, object privileges
> >and roles.
>
> Look at Policy Manager from BrainTree at http://www.sqlsecure.com
>
> >The utility needs to run in a Windows 3.1
> >environment (although we *are* planning on
> >upgrading to Win95 or NT in about 6 months),
> >with an Oracle 7.1.6 server (running under
> >Solaris). Ideally it would include the following
> >features:
 

> >1. Privileges can be maintained on a per user,
> > per role or per object basis. A list of
> > all users, roles and objects (grouped by schema)
> > in the database would be available.
 

> >2. On selecting a username, all system privileges,
> > object privileges and roles that have been
> > granted to that user would be displayed.
> > These could be revoked or added to as required.
 

> >3. On selecting a role, all system privileges,
> > object privileges and other roles that have
> > been granted to that role would be displayed.
> > These could be revoked or added to as required.
 

> >4. On selecting on object (eg a table), all
> > privileges which have been granted on that
> > object would be displayed, showing the grantee.
> > Again, these could be revoked or atted to
> > as required.
>
> Policy Manager allows you to define policy rules for all aspects of
> Oracle security, for example "Only managers can select from the salary
> table". Rules can be evaluated for compliance and a list of
> violations are reported. Violations may be accepted as exceptions to
> the rule or repaired (revoke the access for example).
>
> Policy Manager considers every possible access method, not just direct
> grants. For example, if a user has access to an object because of a
> direct grant, through an "any" privilege (ex: select any table),
> through a role, or through a cascaded role, Policy Manager will find
> each possible "access path" and report upon them. Policy Manager
> manages these aspects of Oracle security:
>
> Privileges held by user or role
> Roles held by user or role
> Objects accesible by user or role
> Authentication (passwords)
> Tablespace accessibility
> Initialization parameters (init.ora)
> Auditing
> Resource profiles
>
> Contact Braintree at (617) 982-0200
> or info_at_sqlsecure.com
> Dave Trahan
> dtrahan_at_ultranet.com

SQL-Programmer 32Bit shipping in the fall will do all of that plus a lot more. For more information hook into http://sfi-software.com or contact Michael McPhee at mmcphee_at_sfi-software.com.

Marc Received on Fri Jul 19 1996 - 00:00:00 CEST