Re: ROLE PW Encryption

> Read the last sentence of his reply slowly and carefully (and only
> once, of course)
> The end-user won't be able to read the code as the code has been
> WRAPped.
>

I read it and perhaps I misunderstood something.

It is clear that the user cannot read the code. But he will be able to execute the function.
e.g. the function returns the Password uncrypted so that the password can be used in
set role role_name identified by uncrypted-password But if the user can access to the function then he will also get the password.
Until now my application has the password hardcoded in the code and the user does not know it. Because he shall not be able to access to the data without the application.

To create the role like
> create role oe_admin
> identified using oe_admin_validate;
works only with 9i and not with 8i as I read. But perhaps I am wrong with that.
But nevertheless the the user can initiate the command with any tool ang get access, and this should not happen.

Does I am wrong?

Regards
Nicolas Received on Thu Aug 04 2005 - 03:53:55 CDT