Security

i think the FGAS is beyond the scop of my assignement although i will add an explanation to suggest it as an alternative.

so what ive done is this:

this mean that the employee in org_unit 1100 can only view records of employees who are in org_unit 1100. This would mean i would have to grant all the employees in org_unit 1100 the same select privilige. Is there a better way i could be doing this that isnt too complicated?

create or replace view emp1100 as
select * from employee
where ou_id = 1100;

grant select on emp1100 to scott;

*

So if u have 1000 diff org units, u mean to say u will create 1000 views.......

Not a scalable solution...

Btw, why do u put * , u gotta do ur home work sometimes....:)

SS

yeah your right, there is only a maximum of 100 organisational units which i have only just read on the assignmnet, so back to the drawing board for me

sorry the * is just to bump up the post, my assignment has to be in tomorrow evening so im in a rush.

sorry again.

if there r going to be less diff. org. units, then u can go for the approach mentioned by u.

i cant think of any other method as of now :)

SS

create or replace view myview as
select * from employee
where ou_id = select ou_id from org_table where emp_name=USER

probably i may be wrong, do u get me what i m trying to do...

in this way whoever logs on he will be able to see his ou_id details only.

u need to modify my sql anyway....

SS

stop spamming

right well ive sorted that view by doing:

create or replace view emp_ou AS
select e1.* FROM employee e1, employee e2
where e1.ou_id = e2.ou_id
and e2.ora_user_id = USER;

butnow i have to satisfy this rule:

an employee should be able to view employee details for employees in the same organization unit AND the organization unit below. Im only concerned with ‘one level’ below.

any ideas?

Quote:

---

Originally posted by Arnielover
my assignment has to be in tomorrow evening so im in a rush.

---

We wouldn't be posting homework assignments, would we?

no way, lol. just need some inspiration as im really struggling with it.