Re: Can I replicate SELECT column permission without using multple views

From: Howard J. Rogers <dba_at_hjrdba.com>
Date: Sat, 9 Mar 2002 06:51:17 +1100
Message-ID: <a6b4od$b7o$1@lust.ihug.co.nz>

Fine grained access control only works by appending a "WHERE" predicate to users' queries. That means you'll get horizontal subsetting of data (i.e., users can see different rows). But it doesn't help if users are only to be permitted to see different columns.

Without the use of different views, I can't see that what the original poster wants is possible.

Regards
HJR

--
----------------------------------------------
Resources for Oracle: http://www.hjrdba.com
===============================


"Stefan" <sroesch3_at_attbi.com> wrote in message
news:T4Zh8.2568$uA5.4916_at_rwcrnsc51.ops.asp.att.net...


> Hi Lee,

>

> look at fine grained access control and the corresponding pl/sql

> packages

>

> Stefan

>

>

> Lee Farrant wrote:

>

> > Hi

> >

> > I have a customer that wants to give some users access to some columns

> > and other users access to other columns on the same table.

> >

> > they cannot implement Column Permissions because this does not support

> > the SELECT column permission.

> >

> > One restriction they have is that the end users must only reference

> > one view or table. So there needs to be some logic under this table or

> > view.

> >

> > Is there a clever way around his :-(

> >

> > Thanks Lee

> >

> > leefarrant_at_hotmail.com

>

Received on Fri Mar 08 2002 - 13:51:17 CST