Re: Setting permission based on column

From: Tom Grenier <tom_at_sqlman.com>
Date: Thu, 07 Feb 2002 23:30:44 -0800
Message-ID: <3C637EA4.90C14424_at_sqlman.com>


How about just doing a query against dba_role_privs? Of course you'll have to open this view to all users that have access to this program -- or to public. In the trigger just check for the role for the user, and if it's a notfound -- raise an alert and return before update.

Stjepan Brbot wrote:

> Since there's no possibility to grant/revoke permission on column basis,
> I'm thinking about trigger that could help in setting some kind of
> security checking if user is allowed to insert value in column of table.
> I.e. I have table with columns A,B,C and want only user with role
> "ABC_ROLE" to have the ability (from Oracle Forms app) to insert/update
> value in column B. This trigger should be raised before real inserting
> new row but don't know how to check if user has ABC_ROLE? Finally, need
> yours ideas, how should this trigger look like?
>
> --
>
> Stjepan Brbot <Stjepan.Brbot_at_ZG.HiNet.HR>
Received on Fri Feb 08 2002 - 08:30:44 CET

Original text of this message