9 Mayıs 2014 Cuma

Secured Entities and Tables in Oracle

When i study on Human Resources tables in my company's database, i have encountered some thing new inside a view which i guessed that it was a table :)
Its name is HR_ORGANIZATION_UNITS but here is a significant detail; this is not a table. This is a view and it does have a APPS prefix which is used for views in oracle.What caused me searching this is similarities with HR.HR_ALL_ORGANIZATION_UNITS table I asked why these both tables have same names and contents.Here is wrong aprroach.The first one is not table.Once again it is a view. So when i search it from oracle documentation web site i faced security subject. Oracle has some restrictions on restricted users on some tables having these entities.

Some oracle documentation findings which might be usefull;

'Restricted security profiles can optionally make use of read-only, or reporting users. These are separate Oracle User,one per restricted security profile, that have read-only access to Oracle tables and view. Reporting users do not have execute privilege on Oracle HRMS PL/SQL packages, and do not have direct access to the secured Oracle HRMS tables.'

  • Organizations
  • People
  • Assignments
  • Positions
  • Vacancies
  • Payrolls
All other entities are unrestricted;that is restricted security profiles can access all records of tables,views and sequences associated with these entities.


The following Oracle HRMS tables are secured:

  • HR_ALL_ORGANIZATION_UNITS
  • PER_ALL_POSITIONS
  • HR_ALL_POSITIONS_F
  • PER_ALL_VACANCIES
  • PER_ALL_PEOPLE_F
  • PER_ALL_ASSIGNMENTS_F
  • PAY_ALL_PAYROLLS_F
Some of these tables (namely PER_ALL_PEOPLE_F,PER_ALL_ASSIGNMENTS_F,HR_ALL_POSITIONS_F and PAY_ALL_PAYROLLS_F)are datetracked. The following table details the views that are based on the
secured tables listed above.


HR_ORGANIZATION_UNITSSecure view of Organization table
HR_ALL_ORGANIZATION_UNITSOrganization table
PER_ORGANIZATION_UNITSSecure view of Organization view (HR Orgs only)
PER_ALL_ORGANIZATION_UNITSUnsecured view of Organization view (HR Orgs only)
HR_ALL_POSITIONSUnrestricted view of datetracked Positions table, effective at session date
HR_ALL_POSITIONS_FDatetracked Positions table
HR_POSITIONSSecure view of datetracked Positions table, effective at session date
HR_POSITIONS_FSecure view of datetracked Positions table
HR_POSITIONS_XSecure view of datetracked Positions table, effective at system date
PER_POSITIONSSecure view of non-datetracked Positions table
PER_ALL_POSITIONSNon-datetracked Positions table
PER_VACANCIESSecure view of Vacancies table
PER_ALL_VACANCIESVacancies table
PER_ASSIGNMENTSSecure view of Assignments table, effective at session date
PER_ASSIGNMENTS_FSecure view of Assignments table
PER_ASSIGNMENTS_XSecure view of Assignments table, effective at system date
PER_ALL_ASSIGNMENTSUnrestricted view of Assignments table, effective at session date
PER_ALL_ASSIGNMENTS_FAssignments table
PER_PEOPLESecure view of Person table, effective at session date
PER_PEOPLE_FSecure view of Person table
PER_PEOPLE_XSecure view of Person table, effective at system date
PER_ALL_PEOPLEUnrestricted view of Person table, effective at session date
PER_ALL_PEOPLE_FPerson table
PAY_PAYROLLSSecure view of Payrolls table, effective at session date
PAY_PAYROLLS_FSecure view of Payrolls table
PAY_PAYROLLS_XSecure view of Payrolls table, effective at system date
PAY_ALL_PAYROLLSUnrestricted view of Payrolls table, effective at session date
PAY_ALL_PAYROLLS_FPayrolls table







Hiç yorum yok:

Yorum Gönder