Lisa,

A couple of years ago, when I was a consultant, I implemented Application
Context and Fine-Grained Access Control, AKA Row Level Security for a
client.

Since it causes a predicate to be appended to the Where clause of every SQL
statement issued against the tables having a Security Policy, I guess
performance could be impacted if you didn't index the columns referenced by
the appended predicates.  We never noticed a bit of degradation in our
testing, but we were careful about the indexing.

I left that project before it went into production, so I don't know the
ultimate outcome.  However, I'd sure use FGAC again, if the need arises, it
works very well.  Actually, I probably *will* use it on a couple of our 3rd
Party apps here which don't enforce security to the degree that we require.
I'll let y'all know how it performs.

Jack C. Applewhite
Database Administrator
Austin Independent School District
Austin, Texas
512.414.9715 (wk)
512.935.5929 (pager)
[EMAIL PROTECTED]



                                                                                       
                    
                      "Koivu, Lisa"                                                    
                    
                      <Lisa.Koivu@efair        To:       Multiple recipients of list 
ORACLE-L              
                      field.com>                <[EMAIL PROTECTED]>                 
                    
                      Sent by:                 cc:                                     
                    
                      [EMAIL PROTECTED]         Subject:  RE: SQL question avoiding 2 
views and not in      
                                                                                       
                    
                                                                                       
                    
                      12/13/2002 03:38                                                 
                    
                      PM                                                               
                    
                      Please respond to                                                
                    
                      ORACLE-L                                                         
                    
                                                                                       
                    
                                                                                       
                    



Has anyone used context and fine-grained security?  I seem to remember the
performance hit was not minimal when using this functionality.





-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to