Oracle security

Question

Hi there, I was looking for some help with some Oracle security queries,
first of all i have the tables
employee
emp_id
emp_name
etc
project
proj_id
proj_name
proj_budget
start_dt
finish_dt
and a link table employee on project
ep_emp_id
ep_proj_id
hourly_rate
ep_mgr_emp_id
I am wanting to let employees only view projects that they are working on using grant select but i dont want employees to see the budget, i would know how to do this selecting from 1 table but im not sure how to select the data from project relating to whether the id is related to a project in the link table i think it uses NOT IN but i dont know how to do this, can someone please help?
thanks

Answer 1

Use a view to apply business/access logic like this and grant select access on the view and not table.
Alternatively, use a trusted name-space (see the CREATE CONTEXT command in the SQL Reference guide). Store the emp id for the connected user in the name-space and use that as filter criteria in the view.
Or else, use the trusted name-space and apply it via a FGAC (fine grained access control) policy in order to create the suggested VPDB.