Complex data security requirement: User + Computer

My customer wishes to restrict access to (Oracle) data based not only upon which
user is logged in, but which client computer is logged into by the user.

For example, a user logged into a workstation deemed to be "in an unsecure area" may not access any financial data. Application-level security cannot be used since this must also include third-party applications such as reporting tools. Simply restricting access to the reporting tool itself is not a solution, since that may be needed to access other, non-restricted data.

I have a couple of ideas, but I don't like either one. Has anyone ever done anything like this before? Received on Thu Jul 10 1997 - 00:00:00 CEST