On Wed, Jan 28, 2009 at 9:49 PM, KaiGai Kohei
<kaigai@ak.jp.nec.com> wrote:
IIRC, 0racle or M$ has a patent to rewrite WHERE clause for security
purpose, so Tom suggested it should be implemented using a hook
deployed within executor.
Yes, it was Oracle. There are a couple newer revisions, but they're all based primarily on Patent #6487552, Database Fine-grained Access Control, Filed Oct 5, 1998/Issued Nov 26, 2002. The patent covers defining a security context, retrieving-defined policies from that context, and applying those policies by directly calling a security-context-related stored procedure in the WHERE clause as well as dynamically adding security-related predicates to the WHERE-clause.
--
Jonah H. Harris, Senior DBA
myYearbook.com