OAS 2024 Row-level Security Authorization

VijayDC

Hi All,

For New OAS 2024 (Linux, Oracle 19c DB) environment is Initblock authorization allowed,

What are all the ways we can setup RLS to implement on Classic BI.

For DV as per my understanding RLS is still not possible, only role based filter.

Please let me know if you require any other information.

Sumanth V -Oracle

@VijayDC - Row level security is supported in OAS, please refer the below document for details on same.

https://docs.oracle.com/en/middleware/bi/analytics-server/metadata-oas/row-level-security.html

In DV if a workbook or dataset is created based on Subject Area then it respects the RLS implemented.

Sumanth V -Oracle

@VijayDC - Initialization Blocks for Authentication and Authorization (Set values for USER, ROLES, GROUP, GROUPS) is currently desupported and planned for removal in future releases.

Reference :

https://docs.oracle.com/en/middleware/bi/analytics-server/whats-different-oas/index.html#OASWD-GUID-C907A4B0-FAFD-4F54-905C-D6FCA519C262

Kindly take these into considerations before planning your development on Security part. Thank you.

VijayDC

@Sumanth V -Oracle

Thanks for the reply,,, I went through the doc on what is desupported and depricated.

Can you shear something on
What are all the ways we can setup RLS for Data security on OAS Classic BI.

For DV as per my understanding RLS is still not possible, only role based filter.

Harish V-Oracle

@VijayDC

Regarding setting up RLS, You can refer to following documentation from OAS

https://docs.oracle.com/en/middleware/bi/analytics-server/metadata-oas/row-level-security.html#GUID-1FDC0A15-9DE7-4838-9C0E-03290F5558B2

Following are some of the examples for setting up RLS

https://blogs.oracle.com/analytics/post/implementing-data-level-security-for-oracle-analytics-cloud-using-database-proxy-user-analytics-session-variable

https://blogs.oracle.com/analytics/post/best-practices-for-implementing-rowlevel-security-in-oracle-analytics-1

Bret Grinslade - Oracle Analytics-Oracle

You can also implement data level filter with roles in datasets.
https://docs.oracle.com/en/cloud/paas/analytics-cloud/tutorial-role-based-filters/#step_three