Implementing row-level access policies
Implementing row-level access is probably the most common form of security controls applied using VPD. It prevents rows from being returned that do not meet the condition defined in policy function, and is activated in any condition regardless of the columns participating in the statement.
In this recipe we will create a new table EMPLOYEES_REG_DATA_VPD in the HR schema, based on the VIEW_REG_DATA definition created in the previous recipe. Next, we will create a policy function that will limit the data that is returned by dynamically applying a region restriction through the application context HR_REGVIW_CONTEXT.
Basically we recreate the scenario used in the previous recipe, but this time using VPD components. ...
Get Oracle 11g Anti-hacker's Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
