| |
 |
|
Oracle Tips by Burleson |
Chapter 2 Introduction
to Oracle Security
much faster pace, giving orders to other people,
and generally behaving in a rather relaxed manner compared to the
visitors. So, this is not the same type of privilege we saw earlier,
it has more to do with general behavioral disposition.
In the database analogy, this would be similar
to a user whose access to specific objects is defined fairly well,
while free roaming is rather restricted. Jane and Judy are both
Claims Analysts, but Jane is senior and handles a higher volume of
claims, as well as the more complicated ones. Due to the nature of
their jobs, they are given the same Oracle database role, which
provides them identical access privileges to objects like tables,
procedures, etc., but since Jane handles more volume and more
complicated cases, she perhaps consumes more CPU power to run more
complicated queries.
Therefore, Jane should be given more access to
the underlying infrastructure, compared to object access privileges.
In Oracle, this is known as a Profile. A named profile is defined
with a specific quota for each of the infrastructural elements, such
as the amount of CPU power the user can consume, memory, number of
times the user can login, etc. It allows the users to perform their
duties as per the requirements.
But how are the profiles related to security in
the HIPAA context? Let's see. Profiles are defined with a CREATE
PROFILE statement in SQL. A profile can have several parameters that
can be individually limited. The parameters important for HIPAA
compliance are described below.
The above text is
an excerpt from:
Oracle Privacy Security Auditing
The
Final Word on Oracle Security
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only $39.95 and has an
immediate download of working security scripts:
http://rampant-books.com/book_2003_2_audit.htm
|
Download your Oracle scripts now:
www.oracle-script.com
The
definitive Oracle Script collection for every Oracle professional DBA
|
|