| Install/componet/init.ora pre-recs for Fine Grained Access (Row Level Security) [message #340396] |
Tue, 12 August 2008 10:50  |
WolfBrother
Messages: 10
Registered: June 2006
Location: Austin, TX
|
Junior Member |
|
|
We have an application provided by a vendor that is configured to use FGAC (RLS). We are using 9.2.0.8 Enterprise edition. We want to know exactly what Oracle software (at software install time), and what components (at database create time), and what initialization parameters (at instance startup time) are a pre-requisite for FGAC (RLS) to work correctly. Please note, this is not Label Security.
Our normal install methodology is to only install what is specifically required and not go with all the defaults. Using one such install, we are experiencing very long response times on some queries only when executed by accounts that are not the schema owner. That is to say, those accounts that would be impacted by the vendor delivered FGAC (RLS) restrictions.
We suspect that some required component is missing because the system privilege "EXEMPT ACCESS POLICY" does not appear in our system. We were going to use that privilege on the problem account just as a test, but the fact that it is missing may be a clue.
We have another system that does have this privilege and using it the problem account does return results for the query quickly. The same account also works quickly without that privilege when we set the following:
query_rewrite_enabled='TRUE'
query_rewrite_integrity='TRUSTED'
We are trying to understand the requirements for FGAC (RLS) to work correctly without relying on the "black-box' install everything and hope it works approach.
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
