Welcome! This is a website that everyone can build together. It's easy!

Location: The Official Oracle Wiki

Discussion: Authentication: Database vs Application


Watch

Anonymous  (Get credit for your thread)


deucewildwood

deucewildwood
Authentication: Database vs Application
Dec 3 2007, 6:32 PM EST
We plan to expose our data warehouse to our extranet which would imply a userbase in the low thousands (5-10). The current direction is to use Directory Services (aka Virtual Directory) to leverage our inhouse LDAP (Tivoli) and AD directories for authentication. Is it crazy to authenticate at the database level as opposed to using service accounts? Some security specialists I've had conversations with contend that it is. Part of the justification is the fine grain security (VPD) will need to have individual information (e.g. physicians only being able to see claims they serviced). Justification "part 2" is that we do not want to enforce fine grained security at the app level. Business Objects is our "primary" interface, but there are still other avenues to the data. 1  out of 7 found this valuable. Do you?    

Sign in to be the first to reply.

Related Content

  (what's this?Related ContentThanks to keyword tags, links to related pages and threads are added to the bottom of your pages. Up to 15 links are shown, determined by matching tags and by how recently the content was updated; keeping the most current at the top. Share your feedback on Wetpaint Central.)