Same user, different app, different role

[maachan]

Hi,

I have an application user who requested to use a reporting tool to run some reports. The application is a COTS product and handles much of its own privileges. The trouble is, when the user accesses the database through the reporting tool, all application privileges are bypassed and the user sees just about everything.

How could I set a role for the session depending on the type of access? For example, accessing through the web server the user can have its default role, but if it's a direct connection using reporting tool, it should use a role specifically created for reporting purposes.



Thanks

[edsperez]

Hi,

Somehow we are facing the same dilemma, wherein only one database user is being use to access the database. Somebody suggested that I take a look at FGAC/VPD to dynamically asign privilege to a session everytime it connect to the database.

I think it is the answer, however I cannot give you much detail as I too am just starting to learn its basic.

Ed