Database Security

anirudh · 10-28-2004, 09:49 AM

hi can some one help me with this

i have a schema user who is owning the table and a RO user, who is having the select privilege on a table. RO user should see the table, if and only if the database/schema/table is accessed from a particular IP-address(ip1) and not from any other IP.
i tried some triggers and also otherthings but to no use
can some one help me on this

THANKS

Hko · 10-28-2004, 10:37 AM

Try somehting like this:

Code:

GRANT SELECT ON database.table TO rouser@192.168.1.1 IDENTIFIED BY 'secret';

Also make sure your MySQL server listens to TCP socket (which isn't the case by default most of the times), if you want people to be able to connect to the server remotely.

Also check out the docs on this topic:
http://dev.mysql.com/doc/mysql/en/Privilege_system.html
http://dev.mysql.com/doc/mysql/en/GRANT.html
http://dev.mysql.com/doc/mysql/en/Security.html

anirudh · 10-28-2004, 10:48 AM

i am using oracle 9i
and want to implement secure application roles but am not able to do this
can any one help me with this
THANKS

Hko · 10-28-2004, 11:47 AM

OK, I was wrong assuming you were using MySQL, but I'd have liked it if you would have provided that info in your first post...

anirudh · 10-28-2004, 12:01 PM

Hi
how can i implement secure application role can you give me a frame work to work with or the code
Thanx