Hello,

I am trying to evaluate if hibernate will work with a DB security requirements on our project. We use Oracle DB and WLS. Our application is required to make database user authentication on all queries/updates. The only way we can do this and support connection pooling is by using Oracle’s OracleOCIConnectionPool DataSource. OracleOCIConnectionPool Datasource can return a connection proxy that is bound to specific user with something like:

Connection c = dataSource.getProxyConnection (String proxytype, Properties userProp);

All our database access has to be through a connection proxy that is bound to a specific user with an account in the database. Meaning we can't just use getConnection method to get a connection from the datasource. We have to use getProxyConnection and pass specific information about the requesting user.

I am kind of new to hibernate so before I spend a lot of effort can anyone tell me if this is something hibernate can be configured to handle.

Thanks!!

I'm currently working in a project using Hibernate 3.0, Spring on an Oracle Database.
We are already up and running but now the management told us about this new security requirement.
I confirm that the only way to accomplish is by using Oracle proxyAuthentication.
I think that is not currently supported by Hibernate also because it is not standard JDBC but it is Oracle Specific.

Do you think is it possible to have this feature supported in the near future or should we think to build some custom code to work with that (maybe in the hibernate layer, maybe in the spring layer)?

Please give us a hope!!!!

Thank you very much.

If you haven't already seen it, you can use SessionFactory.openSession(Connection), and pass your own Connection object, instead of having Hibernate create it for you.

[quote="nathanmoon"]If you haven't already seen it, you can use SessionFactory.openSession(Connection), and pass your own Connection object, instead of having Hibernate create it for you.[/quote]
I've seen but it cannot work in my application because I use spring HibernateTransactionManager to open and close connections as well as to manage transactions of course.

Thank you,
anyhow.