Books for you

152 | Chapter 6: Oracle Security, Auditing, and Compliance
Key parameters defined in the Oracle Database Vault Option are called factors. A
factor is essentially a descriptive dimension that will affect security across the entire
database. Factors include things such as specific application programs, locations, or
times of day. This option comes with more than 40 factors defined, and users can
create their own factors.
Factors are used to define access and audit particular security dimensions. You can
create rules that limit types of access to a particular factor and rule sets that combine
multiple factor rules together. Once you have defined rule sets, you can create application
roles based on these sets, as well as command rules that control whether
database commands can be executed, based on the outcome of rule evaluation. For
example, you could prevent anyone from dropping a particular table unless the command
came from a particular location defined by a factor, or specify that new users
can be defined only by the combined actions of two administrators.


Pages:
320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344