| |
 |
|
Oracle Tips by Burleson |
Chapter 5 Oracle Virtual Private Database
SEE CODE
DEPOT FOR FULL SCRIPT
Note how the query was automatically rewritten
from the query supplied by the user. The user does not control it,
the RDBMS does. The information is presented to the user in such a
way that the user does not even see anything for which he or she is
not authorized.
This is analogous to a virtual set of tables
for each named user, and therefore a virtual database. This setup is
known as Virtual Private Database, since it offers a private view of
the database to the users based on some filtering criteria.
In this chapter, we will discuss how to set it
up and how to use it to enforce security and privacy requirements of
HIPAA and other laws. We will also discuss how to use it in
non-standard environments, as in cases where a named user is not
defined.
Policy
The VPD uses a filtering mechanism to filter
out rows that do not match the required authorization of the user.
This filter can be either dynamic or static. Static filters are not
that useful, but can be used in some cases to exclude a set list of
provider ids.
However, in real life the
filter is going to be different and dynamic. User Nathan may be
promoted or relocated to a different group, and thus he no longer
handles provider 1234567, but the providers 4567891 and 5678912.
This change in business should be immediately reflected in the view,
and should not require a recreation of the view. Therefore, a
dynamic filter is
The above text is
an excerpt from
the bestselling book:
Oracle
Privacy Security Auditing.
It's only $39.95 and has an
immediate download of working security scripts:
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only $39.95 and has an
immediate download of working security scripts:
http://rampant-books.com/book_2003_2_audit.htm
|
Download your Oracle scripts now:
www.oracle-script.com
The
definitive Oracle Script collection for every Oracle professional DBA
|
|
