O'Reilly logo

Learning Oracle PL/SQL by Steven Feuerstein, Bill Pribyl

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

9.6. Managing Patron and Librarian Privileges

Back in Chapter 7, we looked at Oracle security and how we could protect the security of our library application. One important component of application security involves specifying and managing privileges. This section provides the detailed information about how to set up the necessary privileges to protect the library application.

Table 9-3 presents an overview of the software components we will add to the library system in order to allow individuals to have their own password-protected accounts.

Table 9-3. PL/SQL components involved in security for the library system
Category Task Program name Implemented where?
Login-related user interface components User interface for logging in and out
login
Stored procedure (PL/SQL Server Page)
  Support utilities for login PSP
process_login
logout
Package loginweb
  Administrator create and modify any user page
userform
Stored procedure (PL/SQL Server Page)
  Support utilities for userform PSP
process_edits
Package userformweb
  End user modify profile page
editprof
Stored procedure (PL/SQL Server Page)
Administer user security for web applications (using session ids) If username and password okay, create new session id (random string)
new_session_id
Package privweb (privilege for web applications)
  Find user id from session id
user_id
 
  Determine whether session has a particular privilege
assert_allowed
 
Administer user security based on user ids Determine whether ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required