HwoTo FGA with OID
We have customer who used FGA without OID.
When enduser logged-in, 'logon trigger' inspected his roles (in session_roles view) and set session context in order to ensure appropriate access rights for tables with FGA.
Now they migrated user management to OID and discovered that 'global roles' (maintained in OID) are not accessible by 'logon trigger' - 'logon trigger' does not see 'global roles' in session_role view. It is possible to see 'global_roles' later (by end-user selects) but, of course, it's not possible to change session context, yet.
When enduser logged-in, 'logon trigger' inspected his roles (in session_roles view) and set session context in order to ensure appropriate access rights for tables with FGA.
Now they migrated user management to OID and discovered that 'global roles' (maintained in OID) are not accessible by 'logon trigger' - 'logon trigger' does not see 'global roles' in session_role view. It is possible to see 'global_roles' later (by end-user selects) but, of course, it's not possible to change session context, yet.
Here comes my question:
what is intended, standard, way to set session context for sessions connected via OID (enterprise users)?
0