emp_select_restrict',
statement_types => 'SELECT',
update_check => TRUE,
enable => TRUE
);
Chapter 9: Database Security and Auditing 325
An employee can access the HR.EMPLOYEES table as before, but they will only see their row
and the rows of the employees who work for them, if any. Logging in as KMOURGOS, we try to
retrieve all the rows of the HR.EMPLOYEES table, but we only see KMOURGOS and the employees
who report directly to him:
SQL> connect kmourgos/kmourgos622@dw;
Connected.
SQL> select employee_id, first_name, last_name,
2 email, job_id, salary, manager_id from hr.employees;
EMPLOYEE_ID FIRST_NAME LAST_NAME EMAIL JOB_ID SALARY MANAGER_ID
----------- ---------- ----------- ---------- ---------- ------- ----------
124 Kevin Mourgos KMOURGOS ST_MAN 5800 100
141 Trenna Rajs TRAJS ST_CLERK 3500 124
142 Curtis Davies CDAVIES ST_CLERK 3100 124
143 Randall Matos RMATOS ST_CLERK 2600 124
144 Peter Vargas PVARGAS ST_CLERK 2500 124
196 Alana Walsh AWALSH SH_CLERK 3100 124
197 Kevin Feeney KFEENEY SH_CLERK 3000 124
198 Donald OConnell DOCONNEL SH_CLERK 2600 124
199 Douglas Grant DGRANT SH_CLERK 2600 124
9 rows selected.
For the user DGRANT, it??™s a different story:
SQL> connect dgrant/dgrant507@dw;
Connected.
SQL> select employee_id, first_name, last_name,
2 email, job_id, salary, manager_id from hr.employees;
EMPLOYEE_ID FIRST_NAME LAST_NAME EMAIL JOB_ID SALARY MANAGER_ID
----------- ---------- ----------- ---------- ---------- ------- ----------
199 Douglas Grant DGRANT SH_CLERK 2600 124
1 row selected.
Pages:
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537