基于Oracle开发安全的PL/SQL Web应用程序

Web应用模式下，安全是需要考虑的重要问题．本文结合Intranet和Internet两种典型的Web应用模式，从用户与角色管理、权限管理和权限控制三方面，介绍了在Oracle环境下，如何利用PL／SQL网关的基本验证和自定义验证两种方式与数据库安全机制相结合的方法，开发安全的Web应用程序，着重论述了在基本验证方式下，通过数据库自身的权限管理机制来控制用户权限，自定义验证方式下，使用自定义的验证函数来实现权限控制，以及DAD的配置方法。

Development of Secure PL/SQL Web Applications on Oracle

In web application model, security is an important issue to be considered. To develop secure PL/SQL Web applications on Oracle some methods are presented in two types of web application models--Intranet and Internet, and they are discussed in three aspects: users and roles management, privilege management, and privilege control. These methods, which combine PL/SQL gateway basic authentication and custom authentication with Oracle database security mechanism, present how to control user's authorities by using database authentication mechanisms with basic authentication, implementing the authentication function (callback function) with custom authentication and DAD configuration.