Rob Smyth's Blog

Often when demonstrating functionality to do with Case or Customer Relationship Management, I get asked about how secure the application is.

This generally falls in to two types of conversation:
1) Oracle accredits its applications, see
http://www.oracle.com/security/external-security-evaluations.html

2) Oracle's whole stack has security features of particular interest.  So as well as the role based access into applications, questions also get asked about how to secure the data from prying eyes.  There are many ways of doing this but some new technology at the data layer is particularly interesting.  Called Database Vault it allows the management of the database to be split from the access to the data.  So for instance a DBA can be set up so that he can add a column to a table, but cannot look at the data within that table.

Other areas of interest tend to be with managing Identity.  So the question arises as to which single area serves as the master for the user, can you manage directories virtually and a whole bunch of stuff on identification and authentication and authorization.  This is a good launchpad for looking at these here.

Have a nice Christmas.