Hi Hassan,
  I don't think it is good idea to create 600 db users
and maintain  it. It will be nightmare to the dba to
add and delete and keep track of new users.

What I would do, is that, create one user for all the
tables, sequence, stored procedures/functions etc, ie
all DB objects go under one schema. Also create
several other DB users , which do not have any table
or any other Db objects, but have
execute/insert/delete/update permission on specific
tables/stored procedure/functions/SQLs etc, and give
access to very specific area of your application.

Create application users inside the application, and
connect as above specified users, to the DB. This will
transfer the user administration and access control to
ERP admin, rather than system/db admin. I think this
approch will more secure. - for example, on an order
entry form, one DB user have only insert access to
order table. no update/delete/select.


Hope this helps.
-Varughese

--- sm_hasanin <hasan_mohamed@...> wrote: >
Dear all
>
> We are developing Oracle 9i based ERP system,this is
> actually intranet based application.We have around
> 600
> users will be connecting this application daily.
> Here we have some query
> whether we can use user based or Roll based
> privilege
> to access the database?
> In which way it would be better to maintain.
> please advice which is the best way?
> Here is full description for user based:
> All the 600 user name will be created at database
> Roll based: all the 600 user will be created in
> Application side.
> only single user will be created at database side.
>
> please provide me merit and de merit
>
> Thanks
> Regards
> Hassan
>
>
> 

http://personals.yahoo.com.au - Yahoo! Personals
New people, new possibilities. FREE for a limited time.


Ask Your Question by sending Email direct to
OraTechSupportGroup@...  your comment your suggestion about OraTechSupportGroup at Wadhwa_S@...
Sameer Wadhwa (Moderator)


omment your suggestion about OraTechSupportGroup at Wadhwa_S@...
Sameer Wadhwa (Moderator)

---

Yahoo! Groups Links

• To visit your group on the web, go to:
  http://groups.yahoo.com/group/OraTechSupportGroup/
   
• To unsubscribe from this group, send an email to:
  OraTechSupportGroup-unsubscribe@yahoogroups.com
   
• Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.

Yahoo! India Mobile: Ringtones, Wallpapers, Picture Messages and more. Download now.