Skip to main content
Question

IFS Cloud and Oracle Row Level Security


Forum|alt.badge.img+9

In IFS Applications 10, Oracle Low Level security enhance the data segregation to the row level, and it is a good way to enhance it, when the customer requires a very detailed data segregation.

I’d like to know if it is still valid in IFS Cloud, or in IFS Cloud it is a different strategy available

This topic has been closed for comments

2 replies

Kasun Balasooriya
Superhero (Employee)
Forum|alt.badge.img+20

Hi,

 

In IFS applications security is enforced through permission sets. For IFS Cloud, the client that is going to be available is Aurena. For Aurena, permissions are granted through projections. Please go through this to see if it answers your questions regarding Oracle Row Level security with IFS Cloud.

 

Thanks,

Kasun 


Navinth Bakmeedeniya
Hero (Employee)
Forum|alt.badge.img+14

@Gonzalo Valle
In IFS Cloud, Row level security (RLS) can be achieved in different ways.

Some of them are:

  • Using predefined security filters (e.g. DbRowLevelSecurity "company-basic")
  • Using @SecurityCheck annotation
  • Using custom conditions (in where clause)

Please refer to below location in documentation for more info: to https://docs.ifs.com/techdocs/21r1/foundation1/050_development/027_base_server_dev/050_security/030_row_level/default.htm
 

Apart from above, in IFS Aurena, you can define filters at projection level as well for data protection. For instance, for an entity set, override the entity in projection definition to add a filter condition. However, the best way is to define RLS at DB entity/view level (not at the projection level) so that RLS is guaranteed for any consumers who does not directly consumes projections for data retrieval, such as IALs, Lobbies.


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings