Proxy users - who is doing it? Does it work? Is it slow?
348187Jun 27 2007 — edited Jun 28 2007Hello
We wanted to use proxy users for our web app because we are
converting a legacy forms app and we wanted to leverage all of the existing
oracle security, by "switching" the connection pool user to the oracle user we could save a lot of security coding.
Some of the senior developers over here are concerned about performance, so we did a small performance test - very rudimentary and using wall clock time - it seems to take about 1/100 of a second to do the switch - which is okay for our app
Is anyone having performance problems doing the proxy switch?
my personal worry about using oracle proxy users is not the processing overhead as much as the architecture. Are there a lot of people using this technique? I saw a bunch of different approaches on the internet - some people use roles and just do a 'set role', some people use the module field in v$session, some people just write all of their security in the application. We wanted to use proxy users because we are converting a legacy forms app and we wanted to leverage all of the existing oracle security, that way we would save a lot of coding. Also - all of our audit triggers use the USER psedu column - if we do the proxy user all of this code stays the same
How many people out there are using this technique?
Thanks
Peter