Security features of 9i, 10g

Hi All,
Can anybody help me on the following:
Is it possible in Oracle(9i,10g) to restrict access to data within the database from a user who has DBA privileges?
Thanks in Advance
Regards,
Bala

You can use obfuscation so long as you store the key outside the database. If you are like 99.9% of the people that encrypt data, though, you will have a stored procedure that does the encryption based on a key stored in the database, either in a table or as a string literal, which the DBA can get to quite easily. Even if you do store the key outside of the database, though, a crafty DBA could do a quick trace of an application session and find the key that is being passed around.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Similar Messages

Not able to portletise an ADF application with Security Feature.

Dear All,
I am able to portletise a normal ADF application and is running fine on Portal. But as I add security feature to it I am not able to portletise it, For reference i am pasting my web.xml and portlet.xml. Do i need to include any filter or listener?
------------------------web.xml-------------------------------------------------------------
<?xml version = '1.0' encoding = 'windows-1252'?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee">
<description>Empty web.xml file for Web Application</description>
<context-param>
<param-name>javax.faces.application.CONFIG_FILES</param-name>
<param-value>/WEB-INF/faces-config.xml,/WEB-INF/portlet.xml</param-value>
</context-param>
<context-param>
<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
<param-value>server</param-value>
</context-param>
<context-param>
<param-name>CpxFileName</param-name>
<param-value>view.DataBindings</param-value>
</context-param>
<filter>
<filter-name>adfFaces</filter-name>
<filter-class>oracle.adf.view.faces.webapp.AdfFacesFilter</filter-class>
</filter>
<filter>
<filter-name>adfBindings</filter-name>
<filter-class>oracle.adf.model.servlet.ADFBindingFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>adfFaces</filter-name>
<servlet-name>Faces Servlet</servlet-name>
<dispatcher>FORWARD</dispatcher>
<dispatcher>REQUEST</dispatcher>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<url-pattern>*.jspx</url-pattern>
</filter-mapping>
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>adfAuthentication</servlet-name>
<servlet-class>oracle.adf.share.security.authentication.AuthenticationServlet</servlet-class>
<init-param>
<param-name>success_url</param-name>
<param-value>faces/Welcome.jspx</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>resources</servlet-name>
<servlet-class>oracle.adf.view.faces.webapp.ResourceServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>/faces/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>adfAuthentication</servlet-name>
<url-pattern>/adfAuthentication/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>resources</servlet-name>
<url-pattern>/adf/*</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>35</session-timeout>
</session-config>
<mime-mapping>
<extension>html</extension>
<mime-type>text/html</mime-type>
</mime-mapping>
<mime-mapping>
<extension>txt</extension>
<mime-type>text/plain</mime-type>
</mime-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>adfAuthentication</web-resource-name>
<url-pattern>/adfAuthentication</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Guest</role-name>
<role-name>oc4j-administrators</role-name>
<role-name>users</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>Login.jspx</form-login-page>
<form-error-page>Login.jspx</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>Guest</role-name>
</security-role>
<security-role>
<role-name>oc4j-administrators</role-name>
</security-role>
<security-role>
<role-name>users</role-name>
</security-role>
</web-app>
---------------------------------portlet.xml----------------------------------------------
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<portlet-app version="1.0" xsi:schemaLocation="http://java.sun.com/xml/ns/portlet/portlet-app_1_0.xsd http://java.sun.com/xml/ns/portlet/portlet-app_1_0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/portlet/portlet-app_1_0.xsd">
<portlet>
<portlet-name>UC68PortletKunal</portlet-name>
<display-name>UC68PortletKunal</display-name>
<portlet-class>oracle.portlet.server.bridges.jsf.FacesPortlet</portlet-class>
<init-param>
<name>DefaultPage.view</name>
<value>/SearchInput.jspx</value>
</init-param>
<init-param>
<name>BridgeLifecycleListeners</name>
<value>
oracle.portlet.server.bridges.jsf.adf.ADFFacesBridgeLifecycleListener,oracle.portlet.server.bridges.jsf.adf.BindingFacesBridgeLifecycleListener
</value>
</init-param>
<supports>
<mime-type>text/html</mime-type>
<portlet-mode>VIEW</portlet-mode>
</supports>
<supported-locale>en</supported-locale>
<portlet-info>
<title>UC68PortletKunal</title>
<short-title>UC68PortletKunal</short-title>
</portlet-info>
</portlet>
</portlet-app>
Your reply is most welcomed. I am working for 2 days, if you know just give few minutes to address this issue.

hi thanks for reply,
I am using 10.1.3.3 version
Steps followed are mentioned in one of the PDF
Oracle WebCenter Framework Tutorial, 10g (10.1.3.2.0)
B31072-02
Here I am tring to secure some page of application as per user role usinf ADF secuiry feature.
The application runs fine in "stand alone" mode.
While tring portletise i am getting portlet unavilable. So i think i need to modify my portlet.xml OR web.xml
From Welcome Page:
I have login and logout link displayed to user not loggged in and logged in user respectively I have done using golink propery.
Also i have some command button as:
On clicking: Go To MyWeather Rendered to #{backing_Welcome.authenticated &&
bindings.permissionInfo['MyWeatherPageDef'].allowsView}
On clicking: Go To MyContent Rendered to #{backing_Welcome.authenticated &&
bindings.permissionInfo['MyContentPageDef'].allowsView}

PROBLEMS SETTING UP REPORTS SECURITY FEATURE

1. Trying to follow instructions to set up the Reports Security Feature.
2. Successfully run the script rwwwvins.sql
3.Hitting following Error
" Missing string(reports_security_desc) language(us) domain (wwc)sub_domain
(sec)
The portlets have similar names.
The pageORACLE_REPORTS_SECURITY has a display name of :
Missingstring(reports_security_desc) language(us) domain (wwc) sub_domain
(sec)"
4. Followed note 132625.1 with no joy. Same error.
Any help ?
null

do you mean to say that you cannot enter any passphrase on the router web ui or on the wireless computer itself ??
if its on the router , then upgrade / reflash the router's firmware...

On startup I get an Alert dialog that tells me that some security feature is not working and I should correct things in the Firefox profile. What's going on?

On Mac OS X 10.6.6, MacBook Pro.
When I launch Firefox I get an Alert that says,
Could not initialize the application's security component. The most likely cause is problems with files in your application's profile directory. Please check that this directory has no read/write restrictions and your hard disk is not full or close to full. It is recommended that you exit the application and fix the problem. If you continue to use this session, you might see incorrect application behaviour when accessing security features.
If I click OK, it goes away and Firefox seems to work fine, but I don't like this situation. Anyone know what this is?
I've trashed the old Firefox (which left a few dynamic libs open and I had to restart to empty the trash) and I installed the latest Firefox (3.6.14), but the problem remains. I found a profile for Firefox in the /Library/Cache folder, but I don't know what to do with it. My disk has plenty of room.
Any help or pointers appreciated

There are a few possible causes of that error, for details on fixing it see https://support.mozilla.com/kb/Could+not+initialize+the+browser+security+component

Error while Portetizing ADF Application with security feature.

Dear All,
I am able to portletise a normal ADF application and is running fine on Portal. But as I add security feature to it I am getting error, For reference i am pasting my web.xml and portlet.xml.
------------------------web.xml-------------------------------------------------------------
<?xml version = '1.0' encoding = 'windows-1252'?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee">
<description>Empty web.xml file for Web Application</description>
<context-param>
<param-name>javax.faces.application.CONFIG_FILES</param-name>
<param-value>/WEB-INF/faces-config.xml,/WEB-INF/portlet.xml</param-value>
</context-param>
<context-param>
<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
<param-value>server</param-value>
</context-param>
<context-param>
<param-name>CpxFileName</param-name>
<param-value>view.DataBindings</param-value>
</context-param>
<filter>
<filter-name>adfFaces</filter-name>
<filter-class>oracle.adf.view.faces.webapp.AdfFacesFilter</filter-class>
</filter>
<filter>
<filter-name>adfBindings</filter-name>
<filter-class>oracle.adf.model.servlet.ADFBindingFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>adfFaces</filter-name>
<servlet-name>Faces Servlet</servlet-name>
<dispatcher>FORWARD</dispatcher>
<dispatcher>REQUEST</dispatcher>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>adfBindings</filter-name>
<url-pattern>*.jspx</url-pattern>
</filter-mapping>
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>adfAuthentication</servlet-name>
<servlet-class>oracle.adf.share.security.authentication.AuthenticationServlet</servlet-class>
<init-param>
<param-name>success_url</param-name>
<param-value>faces/Welcome.jspx</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet>
<servlet-name>resources</servlet-name>
<servlet-class>oracle.adf.view.faces.webapp.ResourceServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>/faces/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>adfAuthentication</servlet-name>
<url-pattern>/adfAuthentication/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>resources</servlet-name>
<url-pattern>/adf/*</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>35</session-timeout>
</session-config>
<mime-mapping>
<extension>html</extension>
<mime-type>text/html</mime-type>
</mime-mapping>
<mime-mapping>
<extension>txt</extension>
<mime-type>text/plain</mime-type>
</mime-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>adfAuthentication</web-resource-name>
<url-pattern>/adfAuthentication</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Guest</role-name>
<role-name>oc4j-administrators</role-name>
<role-name>users</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>Login.jspx</form-login-page>
<form-error-page>Login.jspx</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>Guest</role-name>
</security-role>
<security-role>
<role-name>oc4j-administrators</role-name>
</security-role>
<security-role>
<role-name>users</role-name>
</security-role>
</web-app>
---------------------------------portlet.xml----------------------------------------------
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<portlet-app version="1.0" xsi:schemaLocation="http://java.sun.com/xml/ns/portlet/portlet-app_1_0.xsd http://java.sun.com/xml/ns/portlet/portlet-app_1_0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/portlet/portlet-app_1_0.xsd">
<portlet>
<portlet-name>UC68PortletKunal</portlet-name>
<display-name>UC68PortletKunal</display-name>
<portlet-class>oracle.portlet.server.bridges.jsf.FacesPortlet</portlet-class>
<init-param>
<name>DefaultPage.view</name>
<value>/SearchInput.jspx</value>
</init-param>
<init-param>
<name>BridgeLifecycleListeners</name>
<value>
oracle.portlet.server.bridges.jsf.adf.ADFFacesBridgeLifecycleListener,oracle.portlet.server.bridges.jsf.adf.BindingFacesBridgeLifecycleListener
</value>
</init-param>
<supports>
<mime-type>text/html</mime-type>
<portlet-mode>VIEW</portlet-mode>
</supports>
<supported-locale>en</supported-locale>
<portlet-info>
<title>UC68PortletKunal</title>
<short-title>UC68PortletKunal</short-title>
</portlet-info>
</portlet>
</portlet-app>
Your reply is most welcomed. I am working for 2 days, if you know just give few minutes to address this issue.

Hi,
not sure what the error message is that you get. However, if you access an application through prortal then the security needs to be enforced by the portal, not the application itself because the portal will modify the request headers.
Did you ask the question on the WebCenter or Portal forum here on OTN
WebCenter Portal
Frank

When I start iTunes on my home computer (Not a MAC), it automatically shuts down, and gives me the message that the Data Execution Prevention security feature has shut it down...what to do?

When I start iTunes on my home computer (Not a MAC), it automatically shuts down, and gives me the message that the Data Execution Prevention security feature has shut it down...what to do?

For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it, which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down page in case one of them applies.
Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
tt2

Saving to PDF using VBA in Excel 2007 using security features such as password and print restriction

Good Afternoon,
I am wondering if there is a way to implement the security features such as password and print restriction while saving a document to PDF using VBA in Excel 2007.
Regards,
Steve

Bill,
Thank you. I was able to find the security setting section. The problem I have now, however, is writing the VBA to save to PDF and incorporate the security settings. I thought if i applied the settings to the Excel document I was working on it would carry over, but this does not seem to be the case. Any idea's?
Regards,
Steve

EBay does not recognize new security feature requiring security number in Firefox but works with IE

eBay has a new security feature when attempting to e-mail a seller; it requires that you enter a numerical code in a box. When on Firefox eBay does not recognize that I've entered the number and keeps telling me to enter the number but when on IE it recognizes the number. What add-on, etc do I need to make Firefox compatible with eBay? Thanks
== URL of affected sites ==
http://ebay.com

The problem seems to be caused by the Java Console add-ons. Disabling mine (6.0.20 and 6.0.21) fixed the problem.

HT1430 Can apple implement the following Security feature.

Apple please make a change to the password secruity feature, that if the 'password feature is set on' has been selected, the IOS device can only be switched off once the correct password has been entered.
As the battery in all IOS devices cannot be removed easily, this feature will allow the owner to track the device until the battery life has ended.
My iPad Mini was stolen, 5 minutes after noticing that the device had been taken, your "findmyiphone app" was unable to track the device, as it had been switched off. All password features were set on and used to protect the device , but todate it has not shown up on the "findmyiphone app". The App tells me that the device is offline.
I have also instructed the app to notify me once it has connected to the internet and a full delete to be implemented.
Your response to this feature would greatly improve the security features that to so clearly advertise.
Regards

This is a user-to-user forum. If you want to make a formal suggestion to Apple, please use the feedback pages at this link: http://www.apple.com/feedback/

What are the new features of Oracle 10g over Oracle9i

Hi Grus..
i want to know what are the new features of oracle 10g over Oracle 9i as well oracle 11g over 10g.. can any one give me the detailed document.
Because I'm struggling each and every time while the interviewer asked above question.
It's very helpful for me if any one give me the detailed document regarding above question
Thanks In Advance
Arun
Edited by: Arun on Oct 23, 2010 10:19 AM

Hi,
Just check below link..would be helpful..
http://www.oracle.com/global/ap/openworld/ppt_download/database_manageability%2011g%20overview_230.pdf
and
Each release of Oracle has many differences, and Oracle 10g is a major re-write of the Oracle kernel from Oracle 9i. While there are several hundred new features and other differences between 9i and 10g, here are the major differences between Oracle9i and Oracle10g:
Major changes to SQL optimizer internals
Oracle Grid computing
AWR and ASH tables incorporated into Oracle Performance Pack and Diagnostic Pack options
Automated Session History (ASH) materializes the Oracle Wait Interface over time
Data Pump replaces imp utility with impdp
Automatic Database Diagnostic Monitor (ADDM)
SQLTuning Advisor
SQLAccess Advisor
Rolling database upgrades (using Oracle10g RAC)
dbms_scheduler package replaces dbms_job for scheduling
and you need to refer oracle documentation for sql, plsql references where you will know particular enhancements made...
thanks
Prasanth
Edited by: Onenessboy on Oct 23, 2010 10:22 AM

New features for oracle 10g DBA

hi all,
i want to download new features for oracle 10g dba in free, but i cant found it free.so if somebody know anylink which provide it free or if somebody have it.plz let me know.i need it on urgent basis.
Ihsan DBA from Pak

http://www.oracle.com/pls/db102/to_toc?pathname=server.102%2Fb14214%2Ftoc.htm&remark=portal+%28Getting+Started%29
Could you not download from here?

Security features in Oracle Apps (Oracle Financuals)

Can you please tell me of any document/book etc which describes the security features in Oracle Apps specially on Oracle financials.

If you have access to Oracle Help-on-line check it there
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Amit Das ([email protected]):
Can you please tell me of any document/book etc which describes the security features in Oracle Apps specially on Oracle financials. <HR></BLOCKQUOTE>
null

Problem due to Ironport Data Security feature

We are using S160 (version 6.0.1-006) in forward mode and as soon as we enable Ironport Data Security feature the WSA stops responding after some time for few minutes and then starts processing http requests. This happens after every 5-10 mins. and ultimately we have to disable the Data security feature. Once the feature is disabled the WSA works smoothly. Please help......

Hi,
If you haven't already, I suggest opening a ticket with customer support.
Jennie

Is there any Security Feature available in any of ...

Dear Everyone, very good day to you all
Just checking for a security feature:
1. Is there a way to hide my Messages or can I set up a Personal password to prevent access from strangers?
2. Is there a way to hide my contacts list or can I set a password to prevent access?
This is a basic feature which should be available in a Mobile phone, everybody has some confidential data that cannot be accessed by someone other than the owner of the Mobile. so could someone let me know which Nokia Models support this feature.
This feature is available in all the Samsung Mobiles strarting from the very basic phone and it is known as " Privacy Lock " where we can lock phone book contacts, messages, memory card access, call log etc etc.
Thanks in advance,
Jagadeesh Yenduri.
Solved!
Go to Solution.

Many Thanks for the swift response, Nokia R&D should concentrate on such simple features, being a Giant in Mobile Market it should understand and concentrate on security too. Everybody needs security and have some important data to hide from others. Hope Nokia Team would read my post and concentrate on such Privacy features.
Thanks in Advance,
Jagadeesh Yenduri.

RFC- WebServices with Security Features

Hi
I have to execute one scenario RFC - WebServices with security features. Kindly let me know where or how can I implement the secuirty features in this scenario. Any documentation/blog/ thread are welcome to undestand about implemeting the secuirty features for this scenario.
Regards
Ramesh

Hi Ramesh,
Check this:
http://help.sap.com/saphelp_nwpi71/helpdata/en/45/504971f7a708d2e10000000a11466f/frameset.htm
http://help.sap.com/saphelp_nwpi71/helpdata/en/87/0827a8d6e04a2a8f822f9c51fa7ef2/frameset.htm
and
http://help.sap.com/saphelp_nwpi71/helpdata/en/37/1a9b6a338cca448508f3a48d2d1e2d/frameset.htm
Regards,
Ravi Kanth Talagana

Security features of 9i, 10g

Similar Messages

Maybe you are looking for