Designing for Row Level Security

From: Abdullah Kauchali <someone_at_someplace.com>
Date: Sat, 7 Jun 2003 15:07:33 +0200
Message-ID: <bbso2t$6lb$1_at_ctb-nnrp2.saix.net>



Hi all,

Has anyone seen/done a compilation of competing strategies for implementing row-level security functionality [viz. certain user(s) have access to certain records in a table via a predefined security policy.].

Separate research (googling) has revealed the following main strategies, but none doing a pro-con synthesis of them (are there more?):

  1. Use of Views within databases;
  2. Use of RDBMS vendor-specific technologies (Oracle e.g.)
  3. Modeling row-level security in the middle-tier of an n-tier application framework.

... anymore?

Any help/comments on your own experiences (good or bad) would be very much welcome.

Thanking in advance,

Abdullah Kauchali Received on Sat Jun 07 2003 - 15:07:33 CEST

Original text of this message