Results 1 to 2 of 2
  1. #1
    Join Date
    Oct 2009

    Unanswered: Extending an SQL where clause


    I'm new to Oracle. I came upon what has been told to me as an Oracle feature and I would like to know how it is implemented.

    It seems that if one user sends an SQL statement to the database, it is possible for Oracle to append an extension of the where clause.

    For example, if I send a

    "select from table 1 where col1 = 'a'",

    Oracle can extend my where clause. If the user is of ROLE1, the server can extend my SQL statement to

    "select from table 1 where col1 = 'a' and col2 = 'b'"

    or, if the user is ROLE2, the server can extend my SQL stament to

    "select from table 1 where col1 = 'a' and col3 = 'c'".

    I tried searching for tips on these but I couldn't find any, so far. Can anybody please explain how this works? It seems to have something

    to do with the DBA_POLICIES table and defining some SYS_CONTEXT values.

    Any help will be appreciated.

  2. #2
    Join Date
    Sep 2002
    Provided Answers: 1
    This is called Fine-Grained Access Control (FGAC), and is also known as Virtual Private Database (VPD) and Row-Level Security (RLS).

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts