Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> VPD Reporting
        
(Message started by: Pete Finnigan on Jul 31^st, 2009, 6:25pm)

Title: VPD Reporting
Post by Pete Finnigan on Jul 31^st, 2009, 6:25pm

I am looking for ideas on how to report on our VPD implementation. I need to be able to provide a report that shows, for example, user Smith has access to column x on table y and columns x,y and z on table q and nothing else.. based on her membership in SSO Group Level I. I don't see any dictionary views that will help with this type of detailed reporting that will satisfy our auditors. It seems that I have to parse the policies' source code. Any thoughts on other strategies are welcome.

Title: Re: VPD Reporting
Post by Pete Finnigan on Aug 2^nd, 2009, 3:26pm

I had to create a similar report for our auditors - did it manually using the policy dictionary tables...

Would also be interested if there is a better method.