EXPERT RESPONSE
Utilizing the Virtual Private Database (VPD) functionality (available in Oracle9i Enterprise Edition) is an excellent way to add row-level security to tables in the database. This functionality works by associating a WHERE clause to each table and, through the query rewrite engine, this WHERE clause is added to each SQL statement issued against the table. By placing the security mechanism at the table level, there is no way to circumvent it by using an alternate tool (like SQL*Plus) to query the database.
Additional functionality can be found in the Oracle Label Security option which utilizes the VPD toolkit to provide a higher level of security that has been verified and tested against U.S. and other government standards for data security.
Row level security documentation for Oracle9i, Release 1 can be found at:
http://download-west.oracle.com/docs/cd/A91202_01/901_doc/network.901/a90148/protdata.htm#1007734
|
