Re: Fine Grained Access Control (FGCA)

Hi Madhavan Thanks to you and Jonathan for the input. Another question on the same subject. How are policies defined for child tables. For example if you have anparent tablewhich has say company id so you define a policy on this column. now a parent child related table, the child tableis related

Re: Fine Grained Access Control (FGCA)

Hi Murali, In our case since the predicats are generated dynamically and a call to the function from outside will give me the predicate being applied. Thanks to Jonathan Lews, I will also make sure now using event 10730. Regards, Madhavan http://www.dpapps.com Thanks for the response. I did

RE: Fine Grained Access Control (FGCA)

I too am working with FGAC and agree that documentation is not very helpful! I did download an Oracle whitepaper, it is more high-level but may help - labelsecurity how to.pdf. I would try to offer some advice, however, my understanding is that each FGAC policy applies to a single

Re: Fine Grained Access Control (FGCA)

Hi Murali, We have FGAC working on any number of tables and the policy is applied by a single function and the text generated is picked up from a table and we have it working without any problems. If you can post details of what you are trying to do we can try and identify why the policy is not

Re: Fine Grained Access Control (FGCA)

Hi Madhavan Thanks for the response. I did get it working. However I have another question. Have you tried to capture what happens behind the scene. I turned on trace however could not trace the actual query that gets added to the SQL statement. Only the function call could be traced not the

RE: Fine Grained Access Control (FGCA)

Title: RE: Fine Grained Access Control (FGCA) If by fine-grained access control you mean what I call row-level security, then here is a proof-of-concept that I adapted to show 1 function for two different policies on two different tables. SQL create table mug 2 (mug_id number, 3 mug_shape

Re: Fine Grained Access Control (FGCA)

You can set event 10730 to get a trace file that holds details of the substitution that takes place on the FIRST PARSE of a statement that uses FGAC. Regards Jonathan Lewis http://www.jlcomp.demon.co.uk Coming soon one-day tutorials: Cost Based Optimisation Trouble-shooting and Tuning Indexing

RE: Fine Grained Access Control

Todd - Haven't used fine grained access control yet, but out of curiosity, how would this work with Weblogic connection pooling? Are you assigning each user an Oracle username? Does that mean you are using a dedicated connection and no pooling? Dennis Williams DBA, 40%OCP Lifetouch, Inc.