Chapter 12. Oracle Label Security

This chapter shows how to apply Oracle Label Security (OLS) to your tables to enforce row-level security. OLS has many capabilities that make it an attractive technique for implementing fine-grained access control. OLS is conceptually easy to understand and is based on a proven and well-understood security model. It makes it easy to create, deploy, and maintain your security; and, in contrast to views with functions and VPD, no coding is required to implement row-level security with OLS.

OLS was designed to meet some of the strongest security requirements ever put forth. This chapter offers a brief review of its history, which helps to explain the labeling concept and the behavior of the product. You’ll then see an example that illustrates the powerful security that OLS provides and the ease with which it can be provided. After a discussion of tips and tricks, OLS and VPD will be compared.