Books for you

For example, in an HR application, users from the HR department may have full
access to the employee base table, which contains basic information such as
employee names, work addresses, and work phone numbers, as well as more
restricted information such as Social Security numbers, home addresses, and home
telephone numbers. For other users in the company, you??™ll want to hide more personal
information by providing a view that shows only the basic information.
Creating a virtual private database or leveraging the Label Security Option, described
in subsequent sections of this chapter provide a more secure means of restricting
access to certain data.
Fine-grained access control
Implementing security is a critical but time-consuming process, especially if you
want to base security on an attribute with a wide range of values. A good example of
this type of situation in the HR scenario previously described would be the need to
limit the data an HR representative can see to only the rows relating to employees
that he supports.


Pages:
302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326