Intermediate-level Security for Forms and Reports

Securing Oracle Reports Services 15-31 3. Assign the following minimum privileges to proxy_user1: GRANT CONNECT, RESOURCE, CREATE ANY DIRECTORY, DROP ANY DIRECTORY TO proxy_user1 The actual user already exists in the database. 4. Log in as the actual user, and assign privileges to the proxy user to connect to the database on behalf of the actual user. a. ALTER USER scott GRANT CONNECT THROUGH proxy_user1; b. Or you can define the roles that the proxy user can connect to the database as. c. ALTER USER scott GRANT CONNECT THROUGH proxy_user WITH ROLE admin; d. Repeat Step A or Step C for all actual database users. The proxy user with minimum privileges is created. However, this proxy user can connect as the actual user with the assigned role. The middle tier can connect to the database as the proxy user first, and then connect as an actual user through the proxy user account.

15.12.4 Obtaining Proxy Access Information

You can configure a new resource in Oracle Internet Directory in the user RAD or default RAD. You can use this key to obtain proxy access information, including user name, password , and database information from Oracle Internet Directory. This information allows you to connect to the database. To create a key in the default RAD, complete the following steps: 1. Log in to the Oracle Internet Directory configuration page http:oidhost:portoiddas. 2. Click the Configuration tab. 3. Click Preferences. 4. In the Preferences page, create a new Resource of type OracleDB under Default Resource Access Information, as shown in the Figure 15–5 . 15-32 Publishing Reports to the Web with Oracle Reports Services Figure 15–5 Oracle Internet Directory Configuration 5. When creating the resource, in the Resource Access Information section, enter the database proxy user name, database proxy password, and the database value in the respective fields. A new key is created, and you can pass this key as a value for the dbproxyConn parameter. The number of proxy user connections and their access levels are set by the database administrator.

15.12.5 Configuration Settings in Reports Configuration Files

To use the database proxy feature, you must add and modify configuration settings in the Reports configuration files.

15.12.5.1 rwserver.conf

In the rwserver.conf file, the dbproxy key is set as follows: dbProxyConnKeys dbProxyKey name=key1 database=db1 dbProxyKey name=key2 database=db2 dbProxyConnKeys This configuration is optional. The dbproxy key is taken from the rwserver.conf file if the dbproxyConn parameter is not passed on the command line. The dbproxykey is obtained from this configuration, based on the database that you specified in the userid command-line parameter.

15.12.5.2 rwservlet.properties

To use the database proxy feature through rwservlet, edit the enabledbproxy setting in the rwservlet.properties file as follows: enabledbproxyyesenabledbproxy By default, enabledbproxy is set to no. For rwclient, this configuration setting is not required.