RLS Solutions with BI Applications

If I have customer that has a BI application that queries a table for say the average of the salary column. If they introduce a row-level security solution like VPD or OLS and a subset of the rows are redacted for that BI query (say policy is you only want the user to be able to see salary for members of their org), the results would be altered and inaccurate results would be returned. What are the best practices for implementing a RLS solution and not interfere with BI-type applications that utilize this data?
Thanks,
Matt
[email protected]

That probably depends on what sort of BI the users need on that aggregate information. One option would be to create an aggregate table (potentially via a materialized view) and to grant the users access to that aggregate table (i.e. a SALARY_DEPT_AGGREGATE table that gives the average, standard deviation, median, etc. salary by department a SALARY_CITY_AGGREGATE table that gives the same breakdown by city). You would have to be able to anticipate the sorts of BI queries that would be allowed by fixing the dimensions of interest, which limits the flexibility of the BI you can perform. And you'd have to be careful that the aggregate data didn't provide enough information to allow users to back in to row-level data (i.e. if there is only one employee in a particular city).
Justin

Similar Messages

  • We have registred a conference during 2 hours, with "Dictaphone" application on an iPhone 3G. We cannot listen it. Have you a solution ? Thanks.

    We have registred a conference during 2 hours, with "Dictaphone" application on an iPhone 3G. We cannot listen it. Have you a solution ? Thanks.

    1. Yes
    2. Yes

  • Error message: "Warning: unresponsive script". Afterward, the system freezes and will then crash. Crash reports have been submitted many, many times without response. I have tried the fore-mentioned solutions with either no results or very bad results

    Error message: "Warning: unresponsive script". Afterward, the system freezes and will then crash. Crash reports have been submitted many, many times without response. I have tried the fore-mentioned solutions with either no results or very bad results which I filed a report but did not receive an answer. The application to block scripts actually worsened the problem and I could not correct the situation for a while (no response from Firefox, at all). I have also been through this procedure without any one contacting me, AT ALL.
    == URL of affected sites ==
    http://http://www.facebook.com (always) and www.YouTube.com (sometimes)

    There does appear to be any support whatsoever from mighty "non caring" FIREFOX & people are getting fed up. We may as well try another system, if they can't be bothered to provide any support for their system, we can't be bothered to use their system.
    Brianeng

  • Our apologies but there was an unexpected error with the application. This problem has been noted, and an email has been sent to the administrators. Please check back in a few hours to try the download again. What is

    What is going on here. I've waited 4 weeks for my ipad which will not do anything untill I've downloaded the latest version of itunes which I can't do because this message keeps appearing,
    Our apologies but there was an unexpected error with the application.
    This problem has been noted, and an email has been sent to the administrators.
    Please check back in a few hours to try the download again.
    Reading another post, someone is still trying after two days!
    Anyone got a solution to this please, or, if not, does anyone know how to email itunes.
    Thanks, Allan

    Found this
    http://www.v3.co.uk/v3-uk/download-review/1955243/apple-itunes-1011
    Hope it helps

  • [Oracle JDBC Driver]This driver is locked for use with embedded application

    Hi
    I installed Sun Java Studio Enterprise 8, and am trying to connect to my Oracle database using the attached tutorial code.
    The code compiles fine, but I get the following error whenever I run the file: [Oracle JDBC Driver]This driver is locked for use with embedded application
    I don't understand what is happening.
    Using the Runtime navigation panel on the upper left of the IDE screen, I can right-click and connect to the database, and navigate database files, using the Oracle JDBC Driver that came with JSE8.
    Name: Oracle Driver
    Driver: com.sun.sql.jdbc.oracle.OracleDriver
    Database URL: jdbc:sun:oracle://JAZZPUP:1521;SID=REPO
    If the driver is installed, and can be used to connect to a database by right-clicking on the database definition in the Runtime panel, why can't I connect to it just using java code in the IDE. I would expect both methods to work or to fail, not one of each using the same IDE.
    Many thanks and take care,
    Shayne
    import java.sql.*;
    public class CreateCoffees {
    public static void main(String args[]) {
    //String url = "jdbc:mySubprotocol:myDataSource";
    String url = "jdbc:sun:oracle://JAZZPUP:1521;SID=REPO";
    Connection con;
    String createString;
    createString = "create table COFFEES " +
    "(COF_NAME VARCHAR(32), " +
    "SUP_ID INTEGER, " +
    "PRICE FLOAT, " +
    "SALES INTEGER, " +
    "TOTAL INTEGER)";
    Statement stmt;
    try {
    //Class.forName("myDriver.ClassName");
    Class.forName("com.sun.sql.jdbc.oracle.OracleDriver");
    } catch(java.lang.ClassNotFoundException e) {
    System.err.print("ClassNotFoundException: ");
    System.err.println(e.getMessage());
    try {
    //con = DriverManager.getConnection(url, "myLogin", "myPassword");
    con = DriverManager.getConnection(url, "login", "password");
    stmt = con.createStatement();
    stmt.executeUpdate(createString);
    stmt.close();
    con.close();
    } catch(SQLException ex) {
    System.err.println("SQLException: " + ex.getMessage());
    } //end class CreateCoffees
    ---

    There are two similar threads:
    http://swforum.sun.com/jive/thread.jspa?threadID=61327&tstart=0
    http://swforum.sun.com/jive/thread.jspa?threadID=51057&messageID=188210
    To summarize - the DataDirectDriver that is shipped with the IDE seems to be locked to be used inside the IDE only because of some licensing issues etc..
    That's weird, I agree. I will raise a question on reasons for such a behavior.
    The solution would be to use Oracle's own driver, that is distributed at no charge from their web site - http://www.oracle.com/technology/software/tech/java/sqlj_jdbc/index.html
    HTH,
    Kirill

  • How to use Entrust with java application on unix platform

    Hi all,
    i have question regarding the use of Entrust with java application on unix
    1)I want to use Entrust for encryption/decryption of the file in my core java application on unix platform.
    What should be requiremnet for the same and how it is implemented?.
    2) I want to Use Entrust for Authentication purpose in my java based web application on unix platform.
    What are requirements for Entrust Authentication and how it is implemented ?

    any one has solution?

  • Using AirTunes with other applications

    What I want to do is to stream the audio output from the 2 laptops in my house (MacBooks with Leopard) wirelessly to a hi-fi. I know an AirPort Express will do this with iTunes, but I don't think it will work with other applications, which is what I want.
    Am I right, and is there any cost-effective way to do what I want to do (Apple solution or not)?
    Thanks in advance.

    World Of Ste wrote:
    What I want to do is to stream the audio output from the 2 laptops in my house (MacBooks with Leopard) wirelessly to a hi-fi. I know an AirPort Express will do this with iTunes, but I don't think it will work with other applications, which is what I want.
    Am I right, and is there any cost-effective way to do what I want to do (Apple solution or not)?
    You might try Airfoil:
    http://www.versiontracker.com/dyn/moreinfo/macosx/26038
    Note that I haven't tried it myself.

  • 3rd party payment integration with ADF application

    Hi ADF experts,
    We have a requirement to integrate our ADF application with 3rd party payment gateway.
    For this we have created 2 servlets(one to post data, and one for relay response) which will talk to payment gateway.
    Since we are using servelts, we wont have access to bindings or any of ADF features. We manage the handshake between servlets and ADF app by passing data through session variables.
    I am not happy with this solution, even though it works in our test environment. I would prefer a complete ADF soultion rather than using servelts/jsps.
    Is there a standard way(either inbuilt in ADF or extensions) to integrate 3rd party gateway with ADF application which is safe and secure?
    Jdev used: 11.1.1.1.5
    Payment gateway used: authorize.net
    thanks
    -Venkat

    You can access adf application module from a servlet. All you have to do its to setup a pagedef for the servlet.Check out my blog http://tompeez.wordpress.com/2011/12/16/jdev11-1-2-1-0-handling-imagesfiles-in-adf-part-3/ Which shows how to do this.
    I'm not aware of standard integration to a payment service.
    Timo

  • HT5663 why I can not open an icloud email attachment with iworks application in icloud directly?

    Hi,
    I like this iwork solution in icloud, but the integrity might be developed more. If I got an email to my icloud inbox, I can not open it with iworks application but it will be downloaded instead. It would be very useful to be able to open an attachment onsite, using one of the iworks app.
    thanks
    janos

    Let Apple know...
    http://www.apple.com/feedback/

  • My iphone 5s (7.1) has permanently the search icon, as if searching network. This affects the speed of email and consumes a lot of battery. This happens even with all applications closed. I have restored the iPhone but the problem persists. Do you have an

    My iphone 5s (7.1) has permanently the search icon, as if searching network. This affects the speed of email and consumes a lot of battery. This happens even with all applications closed. I have restored the iPhone but the problem persists. Does anyone  have an idea of the solution?
    Thanks!!

    Try to reboot the iPhone, if that doesn't help make a backup via iTunes, and restore the iPhone via iTunes.
    Otherwise disable background refresh, and kill all apps

  • How to share JHS BC4J data model with  JClient application ?

    In our project, some application system using JHS Struts/JSP solution but others which need rich UI application prepare to adapt JClient solution, so whether we can share JHS BC4J data model with JClient application ?

    Ting Rung,
    The JClient application will communicate with your application module. So all logic in you app module, EO's and VO's can be resued by JClient. Logic in Jheadstart handlers cannot be reused.
    Steven Davelaar,
    jHeadstart Team.

  • This driver is locked for use with embedded applications - SQL Server

    Hello guys,
    Background:
    I developed an application using JSC2 with MS SQL Server 2000 as the database and Sun Application Server PE 8 as App Server. During development, I am able to deploy and test it. But as soon as I've installed Sun Application Server PE 8 on our Production Server, exported my app there and tried to execute it, I get the error
    "This driver is locked for use with embedded applications".
    I just wanna ask, though I've seen other threads saying that the only solution is to buy the EE or SE of Sun App Server, isn't there really any work-around with this?
    Thanks very much for your help.

    OK, that is the same setup we have (Creator built application running with MS SQL Server).
    I wrote a tutorial talking about integrating Creator with Spring. In it you will find out how to use SQL Server with a Creator built app running on the Platform Edition. That tutorial can be found here: http://swforum.sun.com/jive/thread.jspa?threadID=52657&tstart=15
    In short, look to jTds.
    Hope this helps.

  • Lenovo NeXtScale N1200 Enclosure is a customized solutions for your applications

    QuestionDo you need a customized solutions for your applications?
    AnswerLenovo NeXtScale N1200 Enclosure is a customized solutions for your applications that can be configured to meet your specific business needs. Lenovo NeXtScale N1200 Enclosure is the best solution for optimum compute power, GPU acceleration, maximum compute power, GPU or coprocessor and storage with the right I/O and networking. Since the NeXtScale platform is optimized for standard racks, it allows the mixing of high-density NeXtScale server offerings and non NeXtScale components within the same cluster rack. Lenovo NeXtScale System is comprised of compute nodes and chassis. The compute node is the nx360 M5 and the chassis the n1200 Enclosure.  The chassis can house up to 12 half-wide nx360 M4 and nx360 M5 nodes. The Lenovo n1200 enclosure is a light chassis without integrated networking or switching. As a result, no chassis-level management is required.  The nodes in the chassis with front access cabling would connect to top-of-rack switches installed in the same rack. Lenovo NeXtScale System is the data center solution for clients who are facing challenges such as physical space, budget, and low productivity due to late production readiness. Lenovo delivers NeXtScale, a dense platform that not only is cost optimized but also provides tremendous time to value by helping clients get on-board more quickly.

    Thanks for the suggestion.
    One concern I have is this package is developed for v12.0. According to SAP, these action blocks will work in 12.1 but not in 12.2. I've tried to install it on 12.2. The configuration dialog are not working properly.
    Have anybody succefully implemented this package on 12.2?
    Best regards,
    Arnold
    Edited by: Brad Arnold on Mar 2, 2012 11:53 PM
    Edited by: Brad Arnold on Mar 2, 2012 11:55 PM

  • WLPI: integrating organizations and roles with existing application

    Hi,
    how do I integrate WLPI's organizations and roles with an existing application's
    data structure? It looks like WLPI expects organizations and roles to be groups
    with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
    and a null member). If I am integrating with an application that stores organizations
    and roles in (for example) separate database tables, how do I get WLPI to recognize
    these? Or do I have to maintain the organizations and roles in 2 places, one for
    the application and one for WLPI in the format described above?
    THanks,
    Martin

    Hi Martin,
    We're in the middle of a prototyping exercise of getting WLS, JMS,
    WLP, WLPI integrated accross one security realm. What its looking like
    is this (bear in mind I think this hasn't been tried before judging by
    newsgroups + BEA Docs)
    1)WLP has a bug that you cannot get user details from LDAP(exception
    is thrown)
    2)WLPI does need a certain structure -
    http://e-docs.bea.com/wlpi/wlpi121/install/cfigrun.htm#1246656
    and
    http://developer.bea.com/ftp_bin/Using_LDAP_with_WLPI.zip
    A) To solve your problem maybe you could write a custom realm to
    translate the roles + orgs back (no writing from WLPI ie read only )
    to WLPI.
    B) Maybe you caould have a META-DIRECTORY set up that synchronises the
    RDBMSRealm with something else maybe LDAP or another RDBMSRealm
    We are also looking into a unified security solution by Netegrity
    called siteminder. They are about to release a version for WLS 6 but
    they seem to be laggin behind. This provides a single signon over and
    enterprise system.
    This is a bit vague Martin, I will hopefully have more concrete info
    in a week or 2. If you have any other info you can mail me on -
    [email protected]
    BTW this wouldn't be Martin Van Vilet from the Netherlands that worked
    on the Intelligent Finance Product?
    "Martin van Vliet" <[email protected]> wrote in message news:<3b17ece8$[email protected]>...
    Hi,
    how do I integrate WLPI's organizations and roles with an existing application's
    data structure? It looks like WLPI expects organizations and roles to be groups
    with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
    and a null member). If I am integrating with an application that stores organizations
    and roles in (for example) separate database tables, how do I get WLPI to recognize
    these? Or do I have to maintain the organizations and roles in 2 places, one for
    the application and one for WLPI in the format described above?
    THanks,
    Martin

  • Unable to connect SQL server 2005 databse with JSF applications !

    Hello guys!
    Help me out to connect SQL server 2005 Databse with JSF applications using JDBC-ODBC bridge. I'm working with Netbeans 6.1 IDE.
    I tried for the basic applications but instead got this error:
    "unable to deploy jdbc drivers to the <project>domain/lib"
    Please help me out with working sample codes that connects MS SQL server 2005 DB with JSF!!
    Thank you guys!

    1) don't use the bridge driver
    2) don't do database access from JSF
    3) learn how to use your application server
    4) learn how to use your IDE

Maybe you are looking for

  • How to set up multiple computers on the same network

    I have a small network with 4 computers on it. Two of these I would like to be able to access from outside of the office using Remote Desktop. Before I had this set up working just fine with only one computer, but have recently started sharing my off

  • PSU causing lock ups when gaming? K9A2 Platinum

    I am having black screen and occasionally grey screen lock ups when Im playing games. It can happen within 10 minutes or up to an hour. I have to press the power button to restart and dont get any windows errors or blue screen. I have no issues when

  • How to show system time in JApplet?

    Hello, I would like to show system time in my JApplet the time should update when the system time is changed. i.e 10:10 is system time and the JApplet should show 10:10 , when the time changes in the system, the time in the JApplet should also be cha

  • IPod Comes Up with Error Message when I turn it on...

    Ok. My cousin has a 4th Generation iPod, year and a half old (out of warranty). I know I've seen this question in the forums before, but I was can't seem to find the answer. When he turns on the iPod, it comes up with www.apple.com/support, after the

  • Mobile Broadband: Verizon, Sprint, Type II PC Slot

    As of today, 9/13/2006, neither Verizon nor Sprint offer a USB based solution for Mobile Broadband. Does anyone know of a company that does? Also, what are the options for people that want Mobile Broadband, but don't have a Type II PC Slot? Thanks! i