Weakest link in app security: customization?

12.09.2006

Mogull added PeopleSoft had "pretty good" security models compared to other major enterprise applications and since the Oracle purchase some of that knowledge is "seeping into other areas of Oracle."

"Oracle does tend to be a bit more off-the-shelf than SAP, and the Oracle product line is huge as it has PeopleSoft, Siebel and JD Edwards but the problem is it has yet to integrate it," said Mogull. "The identity management line is still in the integration process; there is no consistent security model across all products."

"One of the things we've done with existing PeopleSoft/JD Edwards applications is to certify people on our middleware stack," said Thomas. "This means we can ensure consistency-this is ongoing with PeopleSoft version 9 and JDE 8.12."

The Oracle director said his firm's Applications Unlimited announcement is "the roadmap to assure customers that Oracle will continue the acquired product lines out into the future, beyond the release of Fusion," which Oracle plans to debut in 2008.

Patch problems