Groups

In any RDBMS, a group is defined as a collection of database users. All users assigned to a group are granted the same database privileges. After you define a group with a particular set of privileges, you can assign users to that group. Using groups simplifies the management of a large number of groups with common requirements.

An LN group consists of a database name and methods to provide object security and authentication in the database. The LN group name is the same name as the database that holds the LN data in the RDBMS. To provide object security and authentication, the LN group uses the mechanisms of the RDBMS.

An LN group is a superset of the usual RDBMS group, in that the group includes the RDBMS group and also the database name and an RDBMS login.

In Oracle, an LN group is made up of three components: a database schema, a login for authentication, and an Oracle role for object security. The Oracle database schema has the same name as the LN group. The login is the same name as the LN group and is assigned database owner (DBO) privileges in the database. Finally, an Oracle role is created, which becomes the target for privileges granted on objects in the database. Users are associated with the Oracle role and, therefore, inherit the privileges granted to the Oracle role. The advantage of having a table assigned to a role is that the members of the group can share and operate on the same data in a single table.

For example, users Maria and John can both be assigned to LN group erpdb. Group erpdb owns the tables and grants select, insert, delete, and update privileges to the Oracle role. Therefore, users Maria and John inherit the select, insert, delete, and update privileges granted to the Oracle role, to access and manipulate LN group table data.

The LN user is shielded from the RDBMS groups. The database driver performs all the processing required to make use of the RDBMS groups. Only the database administrator must be concerned about the RDBMS groups and the LN DBA module that allows the administrator to easily maintain the RDBMS groups.