|
You want to display a new field of sensitive data to display salary information. Which security policy controls access to the field displayed by the component? A. Function Security Policy
What is the correct answer? --- Answer: The correct answer is C as the question was asking a new field. You want to display a new field of sensitive data that contains salary information. Before doing that, it's important to make sure that only authorized users have access to this information. This is where security policies come into play. There are different types of security policies that can be used to control access to data in Oracle Database. The options provided in the question are: A. Function Security Policy
Let's take a closer look at each option and how it relates to controlling access to the salary information field. A. Function Security Policy: This type of security policy allows you to control access to specific PL/SQL functions or procedures. You can use it to restrict access to functions or procedures that retrieve or update sensitive data. However, in the case of displaying a new field of sensitive data, a function security policy may not be the best option as it only controls access to PL/SQL functions, not fields in a user interface. B. ADF Security expression language: ADF stands for Application Development Framework, which is a tool used to build web applications in Oracle Database. The ADF Security expression language allows you to define security rules for components in your application based on user roles, permissions, and other criteria. You can use it to control access to the new field of sensitive data by creating a security rule that limits access to users with the appropriate role or permission level. For example, you could create a security rule that only allows users with the "Manager" role to view the salary information field. C. Data Security Policy: This type of security policy allows you to control access to specific rows or columns of data in a table. You can use it to restrict access to sensitive data based on user roles or other criteria. In the case of displaying a new field of sensitive data, you could create a data security policy that restricts access to the salary information column based on user roles or other criteria. For example, you could create a data security policy that only allows users with the "HR Manager" role to view the salary information column. D. Oracle Platform Security Policy: This type of security policy provides a centralized framework for managing security across multiple Oracle products and services. It allows you to define and enforce security policies across your entire Oracle environment. However, it may not be the best option for controlling access to a specific field of data in a user interface. So, which option is the correct answer to the question? Based on the scenario described, the best option for controlling access to the new field of sensitive data would be either the ADF Security expression language or the Data Security Policy. The specific choice would depend on the details of your application and the specific requirements for controlling access to the salary information field. I hope this explanation helps you understand the different security policies available in Oracle Database and how they can be used to control access to sensitive data.
Oracle Books
Oracle Application
Oracle Home
All the site contents are Copyright © www.erpgreat.com
and the content authors. All rights reserved.
|