Archives of the TeradataForum
Message Posted: Mon, 04 Nov 2002 @ 19:50:03 GMT
Subj: | | Re: Row-level security |
|
From: | | Yonina Schuchman |
We have implemented row level security using one view per fact table. We own multiple chains and keep all of our data in the same
tables. Chain is part of the key on all tables. Some users work specifically for one chain and are not allowed to see other chain's data.
Corporate users may see data for all chains. Some users may see two of the chains' data, etc.
I created a small table mapping chain groups to chain ids. I created another table with user ids and their chain group. A view on top
of both gives me the chains a user may see. The users have access via views only and all the fact table views include a join to my security
view with a WHERE clause of WHERE user id=USER.
This has worked so well that they want me to implement something similar on our Oracle transactional database. No guarantee on that
performance!
|