Roles/SQL*ReportWriter

From: <la_at_datani.dk>
Date: 16 Dec 93 17:47:32 +0100
Message-ID: <1993Dec16.174733.123_at_datani.dk>


Hello Oracle-folks. Copenhagen 93.12.16

This is a repost of an old question with Oracle's answer.

ANYONE out there, who have comments, solutions. ????????

THE APPLICATION:



We am making applications (for sale) with Oracle 7/SqlForms3.0/ReportWriter 1.

We are using ROLES, as security for access to Forms and Reports.

In SQL*Forms we make the access as described in "ORACLE7 Server - Application Developer's Guide, Appendix C", by setting the ROLES in the PRE-FORM trigger.

THE QUESTION:



HOW TO SET ROLES in ReportWriter 1.

We have tried to insert a field, source "&SQL set role <my role>" with group REPORT.

It works, BUT to late. ReportWriter looks at my tables beform reaching the SQL-statement. -> No solution.

We dont's want to GRANT access in advance or GRANT DEFAULT ROLES of security reasons.

ORACLE's ANSWER:



Oracle Denmark accepts that this is a problem.  

BUT they don't think this problem can get a status as a BUG and expects no solutions in ReportWriter 1.  

??? Is Report Writer 1 dead. !!!!   

This means that that IT IS NOT POSSIBLE TO USE THE ROLE-CONCEPT in SECURE applications using Sql*ReportWriter 1.   

Any suggestions, solutions ????

Lone Aalekjær
Datani A/S, A Computer Consultant Firm in Copenhagen. Received on Thu Dec 16 1993 - 17:47:32 CET

Original text of this message