wood burning stoves 2.0*
The moose likes Oracle/OAS and the fly likes Oracle Label Security (OLS), jdbc, connection pool Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » Oracle/OAS
Bookmark "Oracle Label Security (OLS), jdbc, connection pool" Watch "Oracle Label Security (OLS), jdbc, connection pool" New topic
Author

Oracle Label Security (OLS), jdbc, connection pool

Jim Atharris
Greenhorn

Joined: Jan 07, 2008
Posts: 28
Hello,

Currently we are using a connection pool (via BEA app server) to access our Oracle database. However, for security purposes, we are going to incorporate OLS. This basically means instead of executing each query (insert/update/delete) as the default user/pwd for the connection (from the connection pool), we now need to execute those queries as a specified user. Additionally we would like to still use the connection pool. Thus creating a connection per user/pwd contradicts the whole reason behind the connection pool: connections are expensive to create.

Does anyone have experience to share or direction to go research?

Thanks,Jim
JH Harrison
Greenhorn

Joined: Jul 05, 2006
Posts: 4
We are also looking for a similar solution. But no luck with weblogic connection pool.
What we are experimenting is writing a proxy to our DAO's so that once we get a DB connection from the pool then apply OLS label using proxy. But this has server performance impact especially in enterprise scale app.
Honestly speeking we don't know any other solution and we are still struggling to come-up with a neater solution.

We are hoping Oracle will look into our request and provide elegent solution. In the mean time if any of you find or have any suggestion please share your ideas. Thanks

John H
Cory Max
Ranch Hand

Joined: Jul 20, 2005
Posts: 83
Sorry to revive an old thread but... we are also looking for a solution where we can use a connection pool and oracle label security.

Any takers? We could really use some help.

Thanks,

Cory


There are only 10 types of people in this world... Those who understand binary and those who don't.
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Oracle Label Security (OLS), jdbc, connection pool