| Oracle VPD [message #451328] |
Wed, 14 April 2010 01:19  |
aijaz786
Messages: 91
Registered: February 2010
|
Member |
|
|
Hi,
I am exploring Eclipes Reporting Tool "BIRT". It looks good to me. It has good integration with J2EE or Java but I am not working with J2EE or Java. To control access to data being used by reports, can we make use of Oracle Virtual Proviate Database (VPD) feature. My purpose to restrict data in reports based on user and his/her role.
I will appreciate if anybody can advise me about VPD and its usefulness and share the experience.
Thanks.
|
|
|
|
| Re: Oracle VPD [message #451331 is a reply to message #451328] |
Wed, 14 April 2010 01:32  |
 |
Michel Cadot
Messages: 68712
Registered: March 2007
Location: Saint-Maur, France, https...
|
Senior Member
Account Moderator |
|
|
First investigate if you can't do it simply with privileges and/or views.
Envisage VPD only when you cannot do it in any other ways.
VPD are fully described in the documentation, please first refer to it and come back if you have any precise question.
Regards
Michel
[Updated on: Wed, 14 April 2010 01:44] Report message to a moderator |
|
|
|
| Re: Oracle VPD [message #451336 is a reply to message #451328] |
Wed, 14 April 2010 01:43 |
aijaz786
Messages: 91
Registered: February 2010
|
Member |
|
|
Hi Michel,
Thanks. I am exploring every thing. I just need to know experience of our collegues in this connection and risks involved with it. I have not used it previously. I have already started reviewing doucments.
Thanks
|
|
|
|
| Re: Oracle VPD [message #452068 is a reply to message #451328] |
Mon, 19 April 2010 21:55 |
 |
Kevin Meade
Messages: 2103
Registered: December 1999
Location: Connecticut USA
|
Senior Member |
|
|
Most people "roll their own VPD" so to speak with variations on views.
If you want to be really successful, then the thing you need to concentrate on is having a really good understanding of what your SECURITY NEEDS are. Once you have a full and precise understanding of your security needs (AKA your data security nmodel), the actual method you use to enforce it will not be as important and in many cases will be obvious. LIke most everyting else, it is 90% understanding the problem space, 9% testing and 1% coding.
VPD is cool, but it is an Advanced Oracle Feature and so will have its limitations and quirks that you will want to learn before you rely on it. Don't get me wrong, so far as I can tell, VPD works as advertised. The problem is that without exception every Advanced Oracle Feature I have tried to use has come with plenty that it did not advertise.
Good luck, Kevin
[Updated on: Mon, 19 April 2010 21:57] Report message to a moderator |
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
