ABSTRACT

Row-level security is managed using a combination of Oracle8i contexts, stored procedures, database level triggers, and the DBMS_RLS package. The entire row-level security concept is tightly bound to the concept of a database policy. Generally speaking, a policy will require a:

1. Context 2. Procedure to implement the context 3. Database (Oracle8i) level trigger that monitors login activity 4. Security procedure to implement the policy 5. Policy declaration

Row-level security control requires certain environment variables, known as contexts, to be set. The DBMS_CONTEXT package is used to set the various context variables used by the RLS policy. Exhibit 52.1 is a flowchart showing how to implement a simple security policy.