•

•

•

•

•

–

•

•

•

•

•

•

•

–

•

•

•

•

•

•

•

•

•

•

•

•

–

–

–

•

–

–

–

•

–

–

•

•

–

•

–

•

–

•

•

•

–

ROLE PRIVILEGE TABLE_NAME

CAPTURE_ADMIN SELECT DBA_PRIV_CAPTURES

CAPTURE_ADMIN SELECT DBA_UNUSED_OBJPRIVS

CAPTURE_ADMIN SELECT DBA_UNUSED_OBJPRIVS_PATH

CAPTURE_ADMIN SELECT DBA_UNUSED_PRIVS

CAPTURE_ADMIN SELECT DBA_UNUSED_SYSPRIVS

CAPTURE_ADMIN SELECT DBA_UNUSED_SYSPRIVS_PATH

CAPTURE_ADMIN SELECT DBA_UNUSED_USERPRIVS

CAPTURE_ADMIN SELECT DBA_UNUSED_USERPRIVS_PATH

CAPTURE_ADMIN SELECT DBA_USED_OBJPRIVS

CAPTURE_ADMIN SELECT DBA_USED_OBJPRIVS_PATH

CAPTURE_ADMIN SELECT DBA_USED_PRIVS

CAPTURE_ADMIN SELECT DBA_USED_PUBPRIVS

CAPTURE_ADMIN SELECT DBA_USED_SYSPRIVS

CAPTURE_ADMIN SELECT DBA_USED_SYSPRIVS_PATH

CAPTURE_ADMIN SELECT DBA_USED_USERPRIVS

CAPTURE_ADMIN SELECT DBA_USED_USERPRIVS_PATH

CAPTURE_ADMIN EXECUTE DBMS_PRIVILEGE_CAPTURE

•

–

•

–

–

•

–

–

•

–

•

–

–

–

•

–

–

–

•

Roles Separation

Business Users Business Roles

Developer Algorithms/Software Production Data

DBA Meta data Business data

•

•

–

–

–

–

–

–

•

•

–

•

•

Query Transformer

Estimator

Plan Generator

Data DictionaryStatistics

Transformed Query

Query + Estimates

Parsed Query(from Parser)

Query Plan(to Row Source Generator)

Optimizer

•

–

–

•

ID … Birthday … Zodiac Sign

•

•

–

–

•

–

•

–

–

•

•

•

•

–

•

•

–

–

–

–

–

–

•

•

•

•

•

•

•

–

•

•

–

–

•

•

•

•

•

•

•

•

–

•

–

–

•

•

–

–

•

•

•

–

•

–

•

•

•

•

•

•

•

•

–

•

•

–

•

•

–

•

•

•

•

–

•

–

–

Tables

Server

SGA

ServerProces

FBDA

UndoFDA

•

–

•

–

•

•

–

•

–

–

–

•

–

–

–

•

•

•

•

•

–

–

–

•

–

•

ExternalSecurityModule

Encryption

Decryption

•

–

•

•

–

•

–

–

•

ServerProces

DB

Server

SGA

UserProces

DBWR

EncryptionDecryption

ServerProces

DB

Server

SGA

UserProces

DBWR

En/De-cryption

ServerProces

DB

Server

SGA

UserProces

DBWR

Decryption

Encryption

ServerProces

DB

Server

SGA

UserProces

DBWR

Masking

ServerProces

DB

Server

SGA

RMANProces

Backup

DecryptionEncryption

•

–

–

•

•

–

•

–

•

–

•

–

•

–

–

•

–

–

•

–

•

–

Oracle Tablespaces

Application Tablespaces

System Undo

Database

Temp

App 1 App X

Table

TableIndex Table

Chance Improbable

0-1%

Small

1-10%

Possible

10-25%

Probable

25-50%

Fairly certain

50-100%

Imp

act

Very small 1 2 3 4 5

Small 2 4 6 8 10

Serious 3 6 9 12 15

Big 4 8 12 16 20

Very big 5 10 15 20 25

SecurityQualityMoneyTime

•

–

•

–

•

•

–

•

–

–

•