list, i'm ikn the process of designing security for a highly sensitive 
schema for a bank, 

plan:
have multiple oracle users, and use roles, and grant minimum required 
privs, all the user/role/privs management coded in the application (with in 
turn would create the db role and user etc) 

probolem:
i cannot do a "grant select(col1)on tabname to role1", as select grant on a 
column level is not supported, to workaround this i must

1) use views and include all the columns granted seleted privs for a user, 
then give grant select on this view to user.

2) somehow use RLS ?? 

TIA

-Rahul

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: rahul
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to