Authorization in Oracle Part 1 Ji-WonMahesh

Sources Starting source: Starting source: Oracle Database – Security Guide Oracle Database – Security Guide 10g Release 1 (10.1) (Dec 2003) 10g Release 1 (10.1) (Dec 2003) Other sources: Other sources: Oracle SQL, PL/SQL Ref. Oracle SQL, PL/SQL Ref. Hacking via SQL*Plus sessions Hacking via SQL*Plus sessions Random webpages… Random webpages… Have not yet looked through ANSI SQL standard. Have not yet looked through ANSI SQL standard.

Approaches Oracle Enterprise Security Manager Oracle Enterprise Security Manager LDAP v3 compliant Oracle thing LDAP v3 compliant Oracle thing Can store “ACLs” Can store “ACLs” SQL*Plus – grant/revoke SQL*Plus – grant/revoke PL/SQL – Encapsulation of privileges PL/SQL – Encapsulation of privileges VPD VPD

RBAC Orthogonal/complementary feature – Roles Orthogonal/complementary feature – Roles How roles can be defined (e.g., can adopt UNIX groups as DB roles) How roles can be defined (e.g., can adopt UNIX groups as DB roles) “Secure application roles” – “Multi-tier authorization” “Secure application roles” – “Multi-tier authorization” Restricted use of inherited privileges Restricted use of inherited privileges E.g., need explicitly granted rights on base objects to include in view E.g., need explicitly granted rights on base objects to include in view Subtleties when it comes to stored procedures Subtleties when it comes to stored procedures named and anonymous PL/SQL blocks named and anonymous PL/SQL blocks E.g. cannot set roles within a definer’s rights procedure E.g. cannot set roles within a definer’s rights procedure

Privileges System Privilege System Privilege E.g., create view E.g., create view Schema object privilege Schema object privilege E.g., select E.g., select Includes table, view, procedure, type Includes table, view, procedure, type Two kinds of table privileges: Two kinds of table privileges: DML – select, insert, update, delete DML – select, insert, update, delete DDL – alter, index, references DDL – alter, index, references

Overview of “demo” Base table privileges: Base table privileges: Overlapping rights Overlapping rights Cascading and coarse-grained revoke Cascading and coarse-grained revoke “grant any object privilege” “grant any object privilege” Views: Views: Minimum privileges Minimum privileges Operations on join views Operations on join views Revocation – dichotomy Revocation – dichotomy

Overview (contd.) Stored Procedures Stored Procedures Definer/invoker rights does not seem to apply to “execute” privilege Definer/invoker rights does not seem to apply to “execute” privilege

Demo > >