Java Mailing List Archive

http://www.dba.5341.com/

Home » Home (12/2007) » oracle l »

RE: Authorete

Jacques Kilchoer

2004-03-11


RE: Authorete
The "set current_schema" option was not for security reasons but to eliminate the need for the creation of all those synonyms.
-----Original Message-----
April Wells

no, I don't think that will give me what I'm really after...
 
The idea is to tie the hands of the programmers to such an extent that I KNOW what they can and can not do... and how bad they can put me in a bind.
-----Original Message-----
From: Jacques Kilchoer [mailto:Jacques.Kilchoer@quest.com]

Would it also work to create a logon trigger that does an "alter session set current_schema = " instead of creating synonyms?
-----Original Message-----
From: oracle-l-bounce@freelists.org [mailto:oracle-l-bounce@freelists.org]On Behalf Of April Wells

 Ended up having to create case sensitive synonyms (upper case version, lower case version) on the double quoted table structures or the user couldn't log in. 

Granting is easy... aliasing is the interesting part.

Try create synonym user on whoever.user
Oracle tends to get testy.

-----Original Message-----
From: Richard Stevenson
I guess dump software from vendors that don't understand reserved words
wouldn't cut it?
 
Seriously, wouldn't granting all privileges on the objects to another
user work ? 
 

 ----- Original Message -----
From: April Wells <mailto:AWells@csedge.com
Has anyone worked with Authorete software against an Oracle database
before?

I am trying (silly me) to impose some security on this product, and they
have tables called... user... privilege... group... session... and I
need to have the tables owned by one user while another user can SUID
the data, but not affect the table structure (got burned on financials
implementation with customizations... ) and it is geeking out when the
user tries to log into the front end...

©2008 dba.5341.com - Jax Systems, LLC, U.S.A.