Administrator’s Guide

Control of access to sensitive information is of concern to managers, informationofficers, DBAs, and application developers, among many others. Selective accesscontrol based on a users level of security clearance can ensure confidentialitywithout overbroad limitations. This level of access control enables confidence thatsensitive information will be unavailable to unauthorized persons even whilegeneral users have access to needed information, sometimes in the same tables.
Nội dung trích xuất từ tài liệu:
Administrator’s GuideOracle® Label SecurityAdministrator’s Guide10g Release 1 (10.1)Part No. B10774-01December 2003Oracle Label Security Administrator’s Guide, 10g Release 1 (10.1)Part No. B10774-01Copyright © 2000, 2003 Oracle Corporation. All rights reserved.Primary Author: Jeffrey E. LevingerContributors: Paul Needham, Vikram Pesati, Srividya TataThe Programs (which include both the software and documentation) contain proprietary information ofOracle Corporation; they are provided under a license agreement containing restrictions on use anddisclosure and are also protected by copyright, patent and other intellectual and industrial propertylaws. Reverse engineering, disassembly or decompilation of the Programs, except to the extent requiredto obtain interoperability with other independently created software or as specified by law, is prohibited.The information contained in this document is subject to change without notice. If you find any problemsin the documentation, please report them to us in writing. Oracle Corporation does not warrant that thisdocument is error-free. Except as may be expressly permitted in your license agreement for thesePrograms, no part of these Programs may be reproduced or transmitted in any form or by any means,electronic or mechanical, for any purpose, without the express written permission of Oracle Corporation.If the Programs are delivered to the U.S. Government or anyone licensing or using the programs onbehalf of the U.S. Government, the following notice is applicable:Restricted Rights Notice Programs delivered subject to the DOD FAR Supplement are commercialcomputer software and use, duplication, and disclosure of the Programs, including documentation,shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement.Otherwise, Programs delivered subject to the Federal Acquisition Regulations are restricted computersoftware and use, duplication, and disclosure of the Programs shall be subject to the restrictions in FAR52.227-19, Commercial Computer Software - Restricted Rights (June, 1987). Oracle Corporation, 500Oracle Parkway, Redwood City, CA 94065.The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherentlydangerous applications. It shall be the licensees responsibility to take all appropriate fail-safe, backup,redundancy, and other measures to ensure the safe use of such applications if the Programs are used forsuch purposes, and Oracle Corporation disclaims liability for any damages caused by such use of thePrograms.Oracle is a registered trademark, and Oracle Store, Oracle8i, Oracle9i, PL/SQL, and SQL*Plus aretrademarks or registered trademarks of Oracle Corporation. Other names may be trademarks of theirrespective owners. ContentsSend Us Your Comments ............................................................................................................... xxiiiPreface......................................................................................................................................................... xxv Audience .............................................................................................................................................. xxv Documentation Accessibility ........................................................................................................... xxvi Organization....................................................................................................................................... xxvi Related Documentation .................................................................................................................... xxix Conventions......................................................................................................................................... xxx1 Introduction to Oracle Label Security Computer Security and Data Access Controls .............................................................................. 1-2 Oracle Label Security and Security Standards ......................................................................... 1-3 Security Policies ............................................................................................................................ 1-4 Access Control............................................................................................................................... 1-4 Discretionary Access Control .............................................................................................. 1-4 Oracle Label Security ............................................................................................................ 1-4 How Oracle Label Security Works with Discretionary Access Control........................ 1-5 Oracle Label Security Architecture ................................................................................................. 1-6 Features of Oracle Label Security.................................................................................................... 1-6 Overview of Oracle Label Security Policy Functionality........................................................ 1-7 Oracle Enterprise Edition: Virtual Private Database Technology ......................................... 1-8 Oracle Label Security: An Out-of-the-Box ...