Using VPD in combination with a user table?

I'm very new with VPD's. In fact, I don't know a thing about it yet (I know the philosophy behind it and the principle, but not the practical implementation). My question: Are VPD's always based on database-users? Our applications have a user-table now, where the access rights to applications are stored. Once a user is present in that table and has the necessary rights, he can login to the application. So we don't have an actual database-user for each "real-life" user, just an entry in a table.
Is it possible to use the system of VPD's (and maybe Oracle Label Security) with users stored in a table, instead of actual database users?

TomVD wrote:
My question: Are VPD's always based on database-users? No, they are not. You could for example put VPD policies on tables that restrict access after a certain time of the day (not caring which user attempts to access the data, using only SYSDATE and a given cut off access time).
TomVD wrote:
Is it possible to use the system of VPD's (and maybe Oracle Label Security) with users stored in a table, instead of actual database users?Yes you can.
VPD allows you to construct a predicate as you would like based on your requirements (you are basically appending a WHERE clause in to every query based on the logic you dictate on the objects and accesses you determine necessary).
Typically if you're running through a connection pool (as it sounds like you are) you would use an application context to set a specific value (the logging in user) and then validate that against your Users table in whatever fashion tickles your fancy
[Some Tutorials|http://www.google.ca/#hl=en&source=hp&q=oracle+vpd+tutorial&btnG=Google+Search&meta=&aq=0&oq=oracle+vpd+&fp=8e6c6930b7d53e73] may also be helpful
and of course .. [The Documentation|http://download.oracle.com/docs/cd/E11882_01/network.112/e10574/vpd.htm]

Similar Messages

Using mod_alias in combination with dispatcher

Hi all,
In the example dispatcher configuration there is a setting called DispatcherDeclineRoot which has a comment saying: if turned to 1, request to / are not handled by the dispatcher, use the mod_alias then for the correct mapping. Can anyone explain how to use mod_alias in combination with the dispatcher module? For example, how can I configure it to serve static content for a specific alias and go to CQ for other requests? Can someone provide an example configuration?
Many thanks,
Jan

Hi,
It still doesn't quite work the way I want it to... Indeed, when you deny it in the dispatcher config, apache is trying to serve it. However, apache is looking for the file under /var/www/html which is the docroot configured in the dispatcher config. But my files are somewhere else, and there's an Alias defined for this in my apache config file. For some reason apache is not using this alias definition, the dispatcher docroot setting seems to be taking precedence. I tried several of the dispatcher settings (like DispatcherDeclineRoot and DispatcherUseProcessedURL) but to no avail. The reason why I'm not just putting my static files under /var/www/html is because I don't want them to get mixed up with the CQ cache. I want to be able to clear everything in the cache without touching these files I want to serve statically.
Any thoughts?
Regards,
Jabn

How to use your own database with your users to authenticate in a Web app?

Hello, everybody!
I'm starting to write my first web application and I'm going to use JSF, JPA and EJB3 in this application. One of the first things that I have to do on it is the authentication part where I'll have a page with a user name and a password for the user to login. So, as I'm new to all this in Java (I've already implemented this on .NET in the past), I was studying the Java EE 5 Tutorial, especifically the section "Example: Using Form-Based Authentication with a JSP Page". But I saw that the users that the sample application uses come from the file realm on the Application Server. The users are created there and assigned a name, a password and a group. After the users are in the Application Server we can simply uses forms authentication declaratively in the deployment descriptor (web.xml).
But the problem is that this doesn't work to me as I already have my own database with my users, so I want to use it instead of having to create the users on the Application Server.
So, I'm asking you how to do that. Of course I'm not expecting that you place the code here to me as I know that such a thing could be complicated. Instead, I'm asking if you know about some tutorial, article, book or something that teaches how to do what I want. But I would like to see theses examples using JSF and/or EJB3 because these are the technologies that I'm using to develop. It's a pity that the Java EE 5 Tutorial doesn't have an example using a custom database as I know that this situation is very common in the majority of web sites.
Thank you very much.
Marcos

From memory, it goes like this... You just create a
raw jdbc connection on your user database using a
special "login" DB user account, which has
permissions only to an "authenticate" stored query,
which accepts two arguments: username & password, and
returns a boolean 0 or 1 rows found.When I implemented this in .NET's ASP.NET I had the same solution. I had an special user created in the database that I used to log in. When the real user entered his username and password I was already logged in and I had just to check his username and password agains the right table in my database.
But that was only possible bacause when I connected to the database using my hidden user, I used the rights APIs in ASP.NET that coordinate the authentication process. This means that before login in, no one could access any resources (pages, atc...). So what I'm saying is that I can't manager this manually in Java. Java has to have some API or whatever to allow me to control the login process programmatically, while letting the Application Server control the access to the resources.

Using servlet in combination with public_html subfolders

Hi,
I'm fairly new to servlet and jsp technology. Up to this point I only really used PHP for developing dynamic web content. But since I have finally been working more with Java I want to start using Java for my web needs as well. So I've started with servlets and am currently exploring servlet filters. Things started out to go pretty smooth but now I've run into some problems.
What I'm building now is a servlet filter that will check if the user already has a session. If the user doesn't have one the user should be redirected to a login page. Getting this logic to work hasn't been the problem. My problem started when I wanted to place .jsp files in a subfolder.
First of all, I wasn't able to create a subfolder from JDev 10.1.3 so I had to this through the file system (added a subfolder in the public_html folder).
Then when I tried to implement the filter I had a hard time getting the jsp pages and the servlets to work together. This is my setup:
I have a loginservlet that handles the login post request and sets the session if all is ok.
I have both the welcome.jsp and login.jsp in a subfolder called "app".
Then I have a servlet filter.
When trying to access the welcome.jsp the filter succesfully redirects the request to the login.jsp. But from here things go wrong. First, the login page has problems retrieving the css stylesheet. And when it submits the form it doesn't seem to process correctly since it doesn't move on to the welcome.jsp.
Can someone point in the direction of some sort of guide on how to incorporate subfolders for jsp pages in combination with servlets? And is creating subfolders in any way possible from JDeveloper?
Message was edited by:
Deddiekoel

What kind of URL do you use to access the css files etc. from your jsp? Your URL needs to follow the directory structure, so you may need e.g. "../css/style.css"
Also make sure all your files are imported into jdev, since files that aren't won't be copied into the server instance.

Using oracle in combination with the mean-stack

Hi all,
I have been exploring the mean stack and saw the oracle-nodejs-passing by.
I am wondering what the best way is to replace/combine the mongodb with an oracle db (11g).
At this moment I have tried using mongoose for schema's and an json to XML parser to retrieve an xml-representation of the object I want to save.
To do some dml in the db I created some procedures which uses the xmltype in combination with xquery to update/insert.
Although it is working I am wondering this is the way to go. What are your experiences?
Regards,
Romano

The way to go is to use node-oracledb with Oracle 12.1.0.2 JSON datatype support: http://docs.oracle.com/database/121/ADXDB/json.htm
However, since you are still on 11g, using stored procedures to encapsulate logic seems like a good start.
You'll lose some performance using any ORM: do you really need one?

How do I use CFTHREAD in combination with CFFILE Upload

I've been reading how CFTHREAD is supposed to release the
client so that long-lasting operations like a CFFILE upload can
continue to do their business while the client does something else.
How does this work exactly? I can't find any concrete
references. For example, I have a regular file upload form. A user
uploads a large file, say 100Mb, and I want to use CFTHREAD (or
something) to handle the upload process, which I know may take
hours depending on the connection, and immediately return the page
for the client saying "Your file is being processed. Please check
back later."
I tried wrapping some CFFILE code with CFTHREAD, but when I
ran it the page just sat there working while the file was being
uploaded, so I did not witness any change whatsoever in how its
being handled. What am I missing?
<cfthread action="run" name="uploadVideo">
<cffile
action="upload"
destination = "/var/www/video1/assetsIN"
nameconflict="overwrite"
filefield="video" />
</cfthread>
Thanks for any help.
UPDATE: I asked Ben Forta this in an email yesterday and here
was his response:
What you are doing is correct. The actual file processing
(getting the uploaded file) will not happen in a separate thread.
Were you expecting a separate thread for the upload itself? CF
can’t do that for you s CF does not have the file until it is
uploaded. Actually, CF is not even called until the form is
submitted (which includes the file being uploaded). It sounds like
you want the browser to do an upload in the background. This may be
doable using JavaScript and Ajax type controls. Or maybe using
browser tabs or something. -Ben

With file uploads the time consumption is between the client
PC and the web
server, not the web server and the CF server (which are
usually on the same
machine). All <cffile action="upload"> does is copy the
uploaded file from
the web server's temp upload dir to [wherever you tell it to
go]: it's a
local process, and should be fairly quick; certainly compared
to the
process of getting it to the web server in the first place.
Even if the data transmission was between the client PC and
the CF server,
you can't expect <cfthread> to somehow increase the
bandwitdh and speed up
the file upload between the two machines.
<cfthread> could come into its own if you had some file
processing to
perform on the file *after* it's uploaded: unzipping it,
doing some image
manipulation, parsing a CSV file into a DB, that sort of
thing. Not for
the initial upload.
Adam

Using one music library with multiple user accounts

I want to use one Music Library and be able to have all my computer user accounts be able to access it. Article 93195 does not work for some reason. It is easy to share music over a network but not on the same computer? This can't be. I have talked to several Apple "Geniuses" and they all scratch their head. One guy could do it in Leopard, but not in Tiger. Could it have something to do with the permissions of the Itunes Music Folder? Any help would be appreciated. This is driving me crazy.

1 Quit iTunes.
2 Drag your entire *iTunes folder* from /Username/Music to /Users/Shared.
3 Log out.
1 Log in on your other account(s).
2 Start iTunes and immediately press an hold the Option key.
3 iTunes will ask to *Create new library* or *Choose existing library*. Select *Choose existing library*.
4 Select the *iTunes library file* in the *iTunes folder* in /Users/Shared.
5 Now go to File -> *Add to library* and select the *iTunes music folder* located in /Username/Music.
6 - iTunes will add all the music in from this account to the main iTunes music folder/library.
7 Delete the *iTunes folder* in /Username/Music
8 Restart iTunes normally (don't hold Option). Everything should be there.
9 Quit iTunes and log out of the account.
10 Do the above steps for all users. Don't do the first 1-3 steps. Start at the second series.
Log into your account, start iTunes normally and all music should be there.
Whenever any of you do anything in iTunes, it will be seen by all since you are using one and the same iTunes library file.
Create a "main" playlist for each user with their own music. Create a smart playlist and set it to Playlist is not the playlist you created above. Select this and it will show you everything NOT in your playlist. Do the same for the others. This will help when adding only the music you want your own playlist.
Note that iTunes can only be opened by one user at a time. If you have Fast user switching enabled, the other users must quit iTunes in order for anyone else to use it.

HT1420 Possibility to use 1 Computer - configured with 2 user accounts - each account uses a different Apple-ID for iTunes authorization ?

I wonder if it is possible to use 1 Computer (Macbook Pro)
- configured with 2 (ore even more) user accounts (i.e. me + my kid)
- and each user account has a different Apple-ID (account) for iTunes purchases & iTunes authorization ?
I woud think that is fine in terms of the underlying license agreement refereing to re-download purchased movies, shows, apps, etc.
However, it seams that there is that miraculous 90 days restriction, which I don't understand, and which allows me only to "authorise" the Computer under one or the other account. The switch is unfortunatelly only possible every 90 days ?!?
Thanks anybody for help
Oliver

The 90 day association doesn't stop you authorising an account, it only stops you from using another account for iTunes Match or automatic downloads or redownloading its past purchases : http://support.apple.com/kb/HT4627
There are a few methods listed on this page for how you could do it e.g. multiple user acounts, same iTunes but you having separate playlists, separate iTunes libraries : http://support.apple.com/kb/HT1495

Using iChat to communicate with Pidgin users on a Citrix Presentation Serve

We have been using iChat on OS X and Pidgin on Windows XP in our environment for several months now. We use Bonjour as the protocol so it makes for a very lightweight easy, inexpensive IM solution on our network (no server component needed).
I hadn't noticed it before today, but I was communicating with a Pidgin user who was using a Citrix Presentation Server login (running Pidgin within that session), and the name that iChat displayed as the person I was talking to was not the actual person that was talking to me. iChat was displaying a different user who was also using Pidgin in another current session on the Citrix box. If I fired up Pidgin on my XP virtual machine and ran Pidgin from there, the user name is identified properly.
So it appears that iChat is tying the user name of the IM session to the IP address and then looking it up from the list, which results in a random mis-identification of the IM user on the Citrix session. BTW, there was a Bonjour update a few days ago, it may actually be Bonjour rather than iChat itself. Anyone have any suggestions, ideas, bug fixes?

I have no new info on this.
It does seem a bit odd.
Note:
By default Bonjour broadcasts and receives data on port 5353 on UDP Protocol to let other Macs know it is there (Linked to mDNSResponder in Activity Monitor).
See here http://support.apple.com/kb/TS1629
It may pay to try and check Pidgen and the Mac are using the same ports.
7:17 PM Friday; January 22, 2010
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

How to use Final Cut Pro with multiple user accounts?

Hi,
I want to use Final Cut Pro on a clean user account. How do I set it up? How can I access my old FCP library and still work on it from multiple users?
Also, I want my DropBox account to back-up my media. Any tips?

I use external drives as backup. But I don't trust them. And in case of fire or what ever...It is of no use...
But I agree on your comment about DropBox. It would have been the perfect solution though.
What else is there?
I have a 2TB HD but these projects are huge and still growing - so I have to move my projects to several external drives. So maybe I should just work directly from external drives and skip the partition of the computers main drive? I am thinking of the disadvantage of reducing the total storage of the disk.

We have two Ipod Touches in the Home and two Ipads. Right now one of the Ipads has a separate user indentity. Can both Ipods be used to use the same library with different user ids's and different passwords.

We have two Ipod touches and two Ipads in our home. Right now both Ipods are using the same used id and password to access itunes and sync music. But recently both os us have downloaded the Ibooks segment to our Ipads and now the only way to sync the second Ipad for Ibooks is to use the same used id and password. But the problem is that with our two Ipads in the home, we established two separate used ids and passwords one for each. Is there a way for me to still use the second Ipod touch and the second Ipad with completely separate userids and passwords. In other words to share the music library I have accumulated and yet to sign in each with our separate identities. That way the Ipads can sync and the Ipod touches can sync. Is this possible.

This is to avoid piracy. What could happen is, people could buy music, and give it away for free online. Usually it is then you buy a complete album off iTunes that it will only be available on one device. It is tied to that account, and the device must be registered to that account to listen to it.

Using formulas in combination with dates

I'm a salesman and I track my daily sales on numbers. I have 5 columns: date, sales number, sales amount, then other stuff. I need a formula to track on the sales for a certain 2 weeks pay period for another table. I need one that sums the total $ amount of the sales and one that just counts the number of sales. Any help would be greatly appreciated.
Thanks

to get the count, I had to use the countif and the concatenate command together.
If my compare date was in A1 and my information was in Table 2.. Column A was dates and B was Dollars.. modify to fit your final data, it would look like this:
=countif(Table 2::A,concatenate(">=",A1))
And the sum of the Column B in table 2 for the same condition would be:
=Sumif(Table 2::A,concatenate(">=",A1),Table 2::B)
Jason

Using JConsole in combination with SNMP

I have created a simple agent (using version 5 JDK) to handle an MBean. Within this agent I have created two adapters; an HTML and SNMP adapter. The HTML adapter is working fine via the browser (i can execute the operations on the MBean).
Question is; Can I use JConsole to connect to the SNMP adapter?; if not how then?
Code:
public void addSnmpAdapter(int port)
               throws Exception {
          // Register and start the SNMP adapter
          SnmpAdaptorServer snmpAdapter = new SnmpAdaptorServer();
          ObjectName snmpAdapterName = new ObjectName(
                    "MBeanAgent:name=snmpadapter,type=SNMP,port=" + port);
          snmpAdapter.setPort(port);
          mbs.registerMBean(snmpAdapter, snmpAdapterName);
          snmpAdapter.start();
          System.out.println("SnmpAdapter on port " + port);
     }Start command:
java -Dcom.sun.management.jmxremote -Dcom.sun.management.snmp.acl=false -Dcom.sun.management.snmp.port=162 MBeanAgent

Hi Willem,
No you cannot use JConsole to "connect to the SNMP adapter".
JConsole is a JMX Console, not an SNMP console.
What are you trying to do with that SNMP Adaptor anyway?
If you use Java DMK to start an SNMP adapter, and do nothing more,
the adaptor will show you nothing. It is empty. You still need to
generate, implement, and add at least one SNMP MIB to the adaptor.
For more information on this, see the Java DMK documentation.
http://java.sun.com/products/jdmk/jdmk_docs.html
Java SE 5.0 has a built-in SNMP agent that can be started using System
properties on the Java command line. This agent implements a single MIB,
the JVM-MANAGEMENT-MIB, that exposes the JVM Management and Monitoring
data through SNMP.
See here for more info on the JVM SNMP Agent:
What is the JVM SNMP Agent?
http://blogs.sun.com/jmxetc/entry/what_is_the_jvm_snmp
See also here for a discussion of using SNMP versus JMX to monitor your JVMs.
JVM Monitoring: JMX or SNMP?
http://blogs.sun.com/jmxetc/entry/jmx_vs_snmp
Hope this helps,
-- daniel
JMX, SNMP, Java, etc...
http://blogs.sun.com/jmxetc

Using ADF in combination with ESB

I can invoke my ESB Service from my ADF application but I would like to show these results in the ADF application as well. Is there a sample or how-to on how to accomplish this?
I have a synchronous service that will perform a search on my db, getting the criteria from my ADF application and I would like to show the results returned by the ESB back into my ADF Application.

Hi All,
I have the same problem in calling BPEL or Esb from ADF, is there any document or example on this issue?
Any help would highly be appretiated.
Thank you in advance,
Alireza

Best way to link user form with user table

Hi all.
What is the best way to link an user form with a user table (with all of the functions, add, update...)? I have created a simple form, and the question is next:
depending the type object of the user table (document, master...) i have facilities to imlement the basic operations in the form? if i create an UDO i have the functions but i want to use the form that i created with a screen painter.
Thanks.

Hi again i want add a new comment please.
If i want do all functions (add,update...) of my form in my user table, and i want my user table is a <b>type document</b>? how can add new lines in my user table with objet <b>type document</b>? because when i make the instance i nedd to say what type of document is (item,order...) and when i do an add(), not add() in my user table. In what moment or how can assign that the add,update functions... affect in my table?
Thanks again.

Using VPD in combination with a user table?

Similar Messages

Maybe you are looking for