Peter - Go with option #1 unless you relish a career as an Oracle security
officer. With option #1 the developers can create some administrator
screens. Unless security is really, really critical.
Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED]


-----Original Message-----
Sent: Monday, July 29, 2002 3:59 PM
To: Multiple recipients of list ORACLE-L


I am in the process of designing a small database which may have
as many as 250 to 300 users.  We are reaching a stage where we need
to decide how we will control access to this database.  As I see it
we have two options:

1.  Provide a single hidden login for the entire application and control
access to the applicaiton itself either by "roll your own" security or
using the operating system (UNIX) controls.

2.  Create ids for the users in Oracle and grant them access
to the necessary tables using roles.

Any opinions or alternate suggestions?

thanks,

Peter Schauss
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Schauss, Peter
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: DENNIS WILLIAMS
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to