Win a copy of Learn Spring Security (video course) this week in the Spring forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Oracle Label Security (OLS), jdbc, connection pool

 
Jim Atharris
Greenhorn
Posts: 28
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hello,

Currently we are using a connection pool (via BEA app server) to access our Oracle database. However, for security purposes, we are going to incorporate OLS. This basically means instead of executing each query (insert/update/delete) as the default user/pwd for the connection (from the connection pool), we now need to execute those queries as a specified user. Additionally we would like to still use the connection pool. Thus creating a connection per user/pwd contradicts the whole reason behind the connection pool: connections are expensive to create.

Does anyone have experience to share or direction to go research?

Thanks,Jim
 
JH Harrison
Greenhorn
Posts: 4
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
We are also looking for a similar solution. But no luck with weblogic connection pool.
What we are experimenting is writing a proxy to our DAO's so that once we get a DB connection from the pool then apply OLS label using proxy. But this has server performance impact especially in enterprise scale app.
Honestly speeking we don't know any other solution and we are still struggling to come-up with a neater solution.

We are hoping Oracle will look into our request and provide elegent solution. In the mean time if any of you find or have any suggestion please share your ideas. Thanks

John H
 
Cory Max
Ranch Hand
Posts: 83
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Sorry to revive an old thread but... we are also looking for a solution where we can use a connection pool and oracle label security.

Any takers? We could really use some help.

Thanks,

Cory
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic