Re: Oracle Label Security

karthik wrote:

> Hi All,
>
> According to my understanding oracle label security is pplicable for
> only database user.But our requirement states that we have to
> implement for application user .
>
> 1.Whether it is possible?
>
> If possible then
>
> 1.How to assign the policy against the application user.
> 2.How to pass the application user name to database.
> 3.How to assign the oracle defined label against the application user.
> 4.Suppose if we use oracle policy manager for creating the policy and
> defining the label.Whether policy and labels defined by the policy
> manager can be access to application user.
>
> Please help me in above problem
>
> Rgrds
> karthi

From the databases standpoint there are only database users. The database knows nothing about your application.

So please explain how you expect these two independent security systems to even know each other exist much less work together.

I would seriously consider changing your model so that the front-end application has no independent security and all security is handled through, and by, the database.

Daniel Morgan Received on Wed Jan 15 2003 - 16:23:19 CST