Message-ID: <3f867371@news.fhg.de>
From: Holger Peine <peine@iese.fraunhofer.de.omit-this-junk>
Subject: Q re columns accessible from INSERT/UPDATE VPD policy predicates
Newsgroups: comp.databases.oracle.misc
Date: Fri, 10 Oct 2003 10:52:26 +0200
Lines: 24
Organization: Fraunhofer IESE, Kaiserslautern, Germany
User-Agent: KNode/0.7.1
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Path: newssvr20.news.prodigy.com!newsmst01.news.prodigy.com!prodigy.com!newsfeed.cwix.com!newsfeed.icl.net!newsfeed.fjserv.net!feed.news.nacamar.de!newsfeed.vmunix.org!news-mue1.dfn.de!news-koe1.dfn.de!usenet-feed.fhg.de!news.fhg.de!not-for-mail
Xref: newssvr20.news.prodigy.com comp.databases.oracle.misc:132180

Hello everyone,

the policy predicates returned from VPD policy functions are said to
be "appended as a WHERE clause" to any DML operation on the table
protected by that policy. The predicates may access columns of the
protected table by simply naming them. This is easily understood with 
SELECT operations (just imagine the standard example of "... WHERE 
owner = USER" accessing the owner column) and DELETE operations, but what 
about UPDATE and INSERT?
May the columns of the row to be updated or deleted be accessed, and
if so, how? Perhaps using :OLD resp. :NEW qualifiers as in triggers?

I searched Oracle online docs and AskTom, to no avail (and may experiments
ran into problems which I'm not sure are related to my question here).

Thanks for your help,
Holger.

-- 
Dr. Holger Peine
Fraunhofer IESE, Kaiserslautern, Germany
Phone +49-6301-707-134, Fax -209 (shared)
www.iese.fraunhofer.de/Staff/peine -- PGP key on request or via pgp.mit.edu