Details
-
Task
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
None
-
None
Description
Customer is requesting password protected roles, such as those in Oracle:
Create role MyRole identified by 'somepassword';
|
and then setting the role is like this:
set role MyRole identified by 'somepassword';
|
There are entire environments that depend on this, such as Ellucian's Banner with password protected roles. The role is set by each form, the user never knows the password for the role and thus cannot modify the data without using the actual form intended for such access. This works so well that even if a user figures out how to login from the command line, he is still locked out of the database.