11.6 Refining Salary Review with Data Security

After setting up the view and row-level data security policy, you can enhance your app to use them.

You now have the following new elements in place:

• EBA_DEMO_EMP_V view to anchor the data security policy
• ONLY_OWN_REPORTS_POLICY data security policy added and enabled on the view
• Manages Others and HR Reps and Managers Only authorization schemes.

You are ready to adjust the Salary Review page to implement the requested new functionality.

• Switching to Data Security-Enabled View
  When a region uses a table or view with a row-level data security policy, it inherits the enforcement automatically.
• Driving Read-Only with Authorization Rule
  Use the IS_AUTHORIZED function in a PL/SQL Read Only expression to decide when data can be edited.
• Adjusting Salary Review Page Access
  You can adjust the salary review page access by changing the associated authorization scheme.
• Enabling Salary Review Menu for Managers
  You can modify the authorization scheme on the navigation menu entry to change who has access to it.
• Testing Enhanced Salary Review Page
  At runtime, authorization schemes and row-level data-security work together to grant data and feature access based on a user's role.