Proxy Sessions
The idea behind proxy sessions is that we can connect as our application user but do work as an identified person user. This allows us to securely connect as our application user (no individual person passwords are used, nor indeed are they needed), and to audit the activities of individual persons. These goals do not differ radically from what we accomplish with setting our client identifier to the OS user identity, as in the previous section. The primary differences (in our efforts) are:
- With proxy sessions, we are not doing work as our application user, but as our individual user.
- With proxy sessions, an Oracle user must exist for each individual person who is going to connect.
Create Individual Person Users in Oracle
Why ...
Get Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
