Re: 9iR2, grant select on a column (without using views) using RL

2003-08-25 Thread Arup Nanda
think it will work nice for your purpose. Please let us know the devlopment at your side. Hope this helps. Arup Nanda www.proligence.com - Original Message - From: "rahul" [EMAIL PROTECTED] To: "Multiple recipients of list ORACLE-L" [EMAIL PROTECTED] Sent: Sunda

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-25 Thread Vladimir Begun
Tell me about it. :) Regards, -- Vladimir Begun The statements and opinions expressed here are my own and do not necessarily represent those of Oracle Corporation. Tanel Poder wrote: Hi! The views are small part. There are over 15 objects in whole database, of which over 22000 are packages.

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-25 Thread Vladimir Begun
rahul You can use the standard technique for that -- hide your sensitive columns under a view, something like ... SELECT pkey , DECODE(SYS_CONTEXT('CTX$SEC', 'ROLE') , 'CEO', col1 , 'MANAGER', col1 NULL ) col1 ... Where ctx$sec role is a application role based

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-25 Thread A Joshi
Hi, Unrelated question : If the system tablespace is so big would it not hurt performance for queries to all_tables, v$session, dba_segments etc. In such a case : can tables like source$be moved out of system tablespace and would it make sense. Thank YouVladimir Begun [EMAIL PROTECTED] wrote:

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-25 Thread Arup Nanda
are on your own if something happens. In most cases, however, that may not be necessary. Hope this helps. Arup - Original Message - From: A Joshi To: Multiple recipients of list ORACLE-L Sent: Monday, August 25, 2003 2:14 PM Subject: Re: 9iR2, grant select on a column

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-25 Thread Vladimir Begun
A Joshi, Big/huge segments do not hurt performance, they only consume space. Some queries (operations) against big segments can lead to performance problems. So, I do not think that one should consider segment's size as an immediate performance problem. v$session is not a segment you should worry

RE: 9iR2, grant select on a column (without using views) using RL

2003-08-24 Thread rahul
how would i write a policy which retuns selected columns if the user has issued select * from tab ??? using views for each user would work, but then.. i would end up with so many views in the main schema !!! ;-( On Sat, 23 Aug 2003 12:24:39 -0800, Jamadagni, Rajendra [EMAIL PROTECTED] wrote

RE: 9iR2, grant select on a column (without using views) using RL

2003-08-24 Thread rahul
how would i write a policy which retuns selected columns if the user has issued select * from tab ??? using views for each user would work, but then.. i would end up with so many views in the main schema !!! ;-( On Sat, 23 Aug 2003 12:24:39 -0800, Jamadagni, Rajendra [EMAIL PROTECTED] wrote

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-24 Thread Tanel Poder
Hi! how would i write a policy which retuns selected columns if the user has issued select * from tab ??? You can't. Because in describe phase of query, sys.col$ is queried to get column names and datatypes. And this always returns all columns that physically exist in a given table (except

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-24 Thread Tanel Poder
using views for each user would work, but then.. i would end up with so many views in the main schema !!! ;-( SQL select owner, count(*) from dba_views group by owner having count(*) 100 order by 2 desc; OWNERCOUNT(*) -- --

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-24 Thread Vladimir Begun
You would better count how much space those views' definitions consume in your system tablespace. :) Tanel Poder wrote: using views for each user would work, but then.. i would end up with so many views in the main schema !!! ;-( SQL select owner, count(*) from dba_views group by owner having

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-24 Thread Tanel Poder
Hi! The views are small part. There are over 15 objects in whole database, of which over 22000 are packages. System TS is about 4GB. (source$ table is 1.2GB, total of IDL_ tables is also about 1.2G). Tanel. - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL

RE: 9iR2, grant select on a column (without using views) using RL

2003-08-23 Thread Jamadagni, Rajendra
Title: RE: 9iR2, grant select on a column (without using views) using RLS Use RLS ... Raj Rajendra dot Jamadagni at nospamespn dot com All Views expressed in this email are strictly personal. QOTD: Any clod

Re: 9iR2, grant select on a column (without using views) using RL

2003-08-23 Thread Tanel Poder
to control read access to specific columns. Tanel. - Original Message - From: Jamadagni, Rajendra To: Multiple recipients of list ORACLE-L Sent: Saturday, August 23, 2003 11:24 PM Subject: RE: 9iR2, grant select on a column (without using views) using RL Use RLS