In addition to my previous answer. The client application does not login to the database itself. It has no database connection at all. It communicates with an application server who has database access (off course) and it can execute oracle statement as other users (not sure how that is called). In this way security is working. Very complex but it is working.
↧
