Identity-based Connection Pooling in Jboss

[Shashi Prakash]

Hi ,

Is Identity-based Connection Pooling facilty there in Jboss like Weblogic. else is there any way to achieve this ?

[Jeanne Boyarsky]

Moving to our JBoss forum since this is not a general JDBC question.

[Jaikiran Pai]

Shashi,

Can you explain what identity based pooling means? Do you mean the datasource pool is per user credential?

[Javid Jamae]

This is where the username in the application server is used to authenticate against the database. So each connection to the database uses a different username. The idea is to give better auditing / traceability.

I haven't seen anything along these lines in JBoss AS out of the box. You'd probably have to find or write your own datasource that integrates with Oracle to provide that service.

I've never looked into it too much but it sounds like this is overkill. I could be wrong, but this technique doesn't seem to give you much more advantage than keeping audit information in the database table.

[Shashi Prakash]

Basically we are planning to have OLS (Oracle Label Security) in our database and for this we will be making different set of user with different privileges ( Some of users will have different access to any row depending on data label of this row )

And to achieve this from application we need to have user logging to Database using different credentials .

I can see such thing in Oracle C++ Call Interface (OCCI) and also In Weblogic (http://download.oracle.com/docs/cd/E11035_01/wls100/jdbc_admin/jdbc_datasources.html) .

But I am looking to implementing same in Jboss server . I know if I won't find anything then we will have to write our own pooling logic .. but I was looking if someone has already done this or if there is any work around .

[Javid Jamae]

Speaking from experience, it is a nightmare to manage security policies at the user level rather than the group/role level. If possible stick with a simple role-based security model. That way, you only have to manage security for a small number of groups rather than a large number of people.

[Shashi Prakash]

"Speaking from experience, it is a nightmare to manage security policies at the user level rather than the group/role level."


Yes, we will be applying security at role level only but still we have so many roles and group to manage and all these roles/group will have different database Credentials and we will be needing connection pooling for sure and also at role/group level .

I was looking around and found soemthing like "Implicit Connection Caching" provided by oracle 10 g . If this is sufficient (http://www.stanford.edu/dept/itss/docs/oracle/10g/java.101/b10979/conncache.htm).?