From: davidsmith633@hotmail.com (David Smith)
Newsgroups: comp.databases.oracle
Subject: Re: Security - keeping data separate
Date: 7 Jul 2002 07:11:31 -0700
Organization: http://groups.google.com/
Lines: 22
Message-ID: <d54a9dfe.0207070611.6dce8b3c@posting.google.com>
References: <d54a9dfe.0207051724.44d86517@posting.google.com> <B94BA038.38A79%markbtownsend@attbi.com>
NNTP-Posting-Host: 62.190.244.187
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1026051091 9969 127.0.0.1 (7 Jul 2002 14:11:31 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: 7 Jul 2002 14:11:31 GMT


Mark Townsend <markbtownsend@attbi.com> wrote in message news:<B94BA038.38A79%markbtownsend@attbi.com>...

> Look into Virtual Private Database - VPD - see
> http://otn.oracle.com/deploy/security/oracle8i/pdf/vpd_wp6.pdf

Thanks for that. I see that Orcale 9i also supports VPD.

Unfortunately this feature is only available in the Enterprise edition
(as with nearly all the cool stuff!!!)

For a company which cannot afford the high cost of these licences, can
anyone recommend a more simplistic approach that will provide some
degree of data separation using the Standard Edition?

(I should add that the solution I proposed earlier, with separate
tables for each company on whom data is held, would make it harder to
do queries across multiple companies for the administrator. This would
perhaps involve a view, which I don't think can be optimized as well
as queries on tables.)

Thanks,
David.

