Skip to main content

Hi All 

Will you know if the Row Level Security is evergreen ?

SO to speak, at the time some WHERE clause are added to standard views, at the time a new relasse of IFS Cloud is installed, does the installation will keep the WHERE clause in the customer environnement ?

 

Best regards and take care.

Eric

Hi Eric,

 

Oracle RLS does not modify any objects delivered by IFS. That’s a kind of an additional layer. Therefore: RLS settings will still be active after installing changes in IFS code.

 

Best regards

Heinz


Hi Eric,

 

Oracle RLS does not modify any objects delivered by IFS. That’s a kind of an additional layer. Therefore: RLS settings will still be active after installing changes in IFS code.

 

Best regards

Heinz

Hello Heinz

there are two natures of row level security :

 

https://docs.ifs.com/techdocs/22r1/060_development/027_base_server_dev/050_security/030_row_level/

  1. first is at Business component level and is part of Base server development
  2. the other one is related to permission set filter configuration

It sounds strange that a Base server development would not be overwritten by an IFS upgrade. Did you mean both cases are evergreen? Or only the 2nd one?

 

Thanks


I think we are talking about two different concepts here. Heinz is talking about the Oracle RLS which is a concept to add security on data level and does not involve any changes in IFS code: https://docs.oracle.com/database/121/TDPSG/GUID-72D524FF-5A86-495A-9D12-14CB13819D42.htm#TDPSG94446

 

The IFS concept “IFS Row Level Security” is done in the IFS code. If it is in Core it will still be there after an upgrade, if not STD has removed the security but that is very unlikely to happen. If you have added “IFS Row Level Security” in a customization that is not handled in the STD upgrade and you need to upgrade and re-install your customization, like all the other things you have customized. Most probably the concept of “IFS Row Level Security” is the same and you do not need to do anything for that part of the customization. Of course it also depends on what you are upgrading from and to.


I think we are talking about two different concepts here. Heinz is talking about the Oracle RLS which is a concept to add security on data level and does not involve any changes in IFS code: https://docs.oracle.com/database/121/TDPSG/GUID-72D524FF-5A86-495A-9D12-14CB13819D42.htm#TDPSG94446

 

The IFS concept “IFS Row Level Security” is done in the IFS code. If it is in Core it will still be there after an upgrade, if not STD has removed the security but that is very unlikely to happen. If you have added “IFS Row Level Security” in a customization that is not handled in the STD upgrade and you need to upgrade and re-install your customization, like all the other things you have customized. Most probably the concept of “IFS Row Level Security” is the same and you do not need to do anything for that part of the customization. Of course it also depends on what you are upgrading from and to.

 

Thanks Tomas for the clarification between Oracle and IFS. In the initial request, Eric meant IFS row level security.