CSI235-Lab 4 Database Triggers that Implement an Access Control Rule Solved

This laboratory includes implementation of database triggers that implement an access control rule.

 

Tasks 
Task 1 Automatic recording of information in a database
 

In this task we implemented the first part of a system that verifies the following access control rule.

 

An item can be added to an order only by a user who created the order. 

 

If you skipped the Prologue section of specification Laboratory 4 then it is recommended to read it now.

 

Implement SQL script solution1.sql that performs the following actions.

 

(1)     First, the script creates a relational table to store information about a new order key and a name of user who created a new order.

 

(2)     Next, the script creates a database trigger, that automatically inserts into a relational table created in the previous step, a key of a new order and a name of a user who created the order. If an order is deleted then the trigger must automatically delete information about an order key and a user who earlier created the order. A type of a trigger is up to you.  

 

(3)     Next, the script comprehensively tests the trigger. A test must include listing of the contents of a table with order keys and user names, insertion of an order, listing of the contents of the table again, deletion of an order, and listing of the contents of the table again.

 

When ready, process SQL script solution1.sql and create a report from processing of the script in a file solution1.lst.

 

Your report must include a listing of all PL/SQL statements processed. To achieve that put the following SQLcl commands:

 

SPOOL solution1 

SET ECHO ON 

SET FEEDBACK ON 

SET LINESIZE 200 

SET PAGESIZE 400 

SET SERVEROUTPUT ON 

 

at the beginning of SQL script and

 

SPOOL OFF 

 

at the end of SQL script.

 

Deliverables
A file solution1.lst with a report from the implementation of a script solution1.sql that creates a new relational table, a database trigger, and tests the trigger.  A report must have no errors and it must list all SQL statements processed.  

                                                                                                                                                   


Task 2 Implementation of an access control rule
 

Task 1 must be implemented before Task 2.  

 

In this task we implement the second part of a system that verifies the following access control rule.

 

An item can be added to an order only by a user who created the order. 

 

If you skipped the Prologue section of specification Laboratory 4 then it is recommended to read it now.

 

Implement SQL script solution2.sql that performs the following actions.

 

(1)     First, the script creates a database trigger that fires whenever a new item is added to an order. The trigger must verify if a user who creates a new item is the same user who created an order into which a new item is added.

 

 If a user who attempts to insert a new item into an order created by another user the trigger must abort the transaction and must display an error message.  Otherwise, the trigger does nothing.

 

(2)     Next, the script tests the trigger.  

 

A test must include creation of two new orders.  

 

Then, insertion of a new item into one of the orders created a moment ago must be successful.  

 

Next, the script updates one of the user names in a relational table created in Task 1.

 

Next, insertion of another item into an order created by a user whose name has been updated fails the access control rule.  

 

Finally, insertion of an item to an order whose creator is unknown must also fail the access control rule.

 

In this task a processing error is a good news and we abolish a principle saying that no marks are granted for processing errors. Note, that it applies only to Task 2.

 

When ready, process SQL script solution2.sql and save a report from processing in a file solution2.lst.

 

Your report must include a listing of all PL/SQL statements processed. To achieve that put the following SQLcl commands:

 

SPOOL solution2 

SET ECHO ON 

SET FEEDBACK ON 

SET LINESIZE 100 

SET PAGESIZE 200 

SET SERVEROUTPUT ON 

 

at the beginning of SQL script and

 

SPOOL OFF 

 

at the end of SQL script.