6
OP Security

Oracle9iAS Personalization follows the Oracle Data Server security policy. OP implements the following measures:

• Any data that needs to be protected is encrypted using standard Oracle security tools.

• Transmission of sensitive data is encrypted between various OP components.

• The DBA grants access to qualified users.

• OP uses secure SSL technology to access Oracle HTTP Server.

• To invoke Workflow Engine background processes, the user needs to know the Workflow administrator user name and password.

User Access

The DBA is responsible for creating database users and setting up proper privileges for them so that they can access OP.

OP controls user access by providing two database roles:

• OP_ADMIN: This role allows the user to access the OP product as an OP Administrator. This means having access to the entire OP product, including the Message Viewer.

• OP_REPORT: This role allows the user to view OP reports and access the Report Viewer URL (http://<hostname>/OP/Admin/ReportsPage).

By default, the MOR Schema owner is the OP Administrator, and thus has the full privileges to access the OP product.

For new OP users, the DBA needs to grant either OP_ADMIN or OP_REPORT to the new user as follows:

SQL> grant OP_ADMIN to <new_user>;

SQL> grant OP_REPORT to <new_user>;

For existing database users, the DBA must grant either role to allow them access to OP product at the appropriate level.