Forum Stats

  • 3,741,760 Users
  • 2,248,473 Discussions
  • 7,861,977 Comments

Discussions

Password Protected Role

Roberta_99x
Roberta_99x Member Posts: 4
edited May 30, 2019 7:44AM in Database Security - General

can someone please guide me how to know the password of a database role ?

also what are the pro's / con's of using Oracle password protected role ?

appreciate your help/feedback.

Best Answer

  • Emad Al-Mousa
    Emad Al-Mousa Member Posts: 716 Bronze Trophy
    edited May 29, 2019 9:23AM Accepted Answer

    a password protected role is created with the following syntax:

    create role rl_dummy identified by XXXXX;

    the password of this role is stored in SYS.USER$ dictionary, in encrypted/hashed format.

    its better to use secure application role instead , password protected role will require having the password explicit within your code which will require obfuscation (protection).

    hope this helps you.

Answers

  • Emad Al-Mousa
    Emad Al-Mousa Member Posts: 716 Bronze Trophy
    edited May 29, 2019 9:23AM Accepted Answer

    a password protected role is created with the following syntax:

    create role rl_dummy identified by XXXXX;

    the password of this role is stored in SYS.USER$ dictionary, in encrypted/hashed format.

    its better to use secure application role instead , password protected role will require having the password explicit within your code which will require obfuscation (protection).

    hope this helps you.

  • Roberta_99x
    Roberta_99x Member Posts: 4
    edited May 30, 2019 7:44AM

    Thanks for your feedback, we will explore secure application role

Sign In or Register to comment.