 |
|
Oracle Tips by Burleson |
Chapter 13
Oracle 10g Enhancements
Setting the values of the parameter policy_type to
context_sensitive and static, respectively, indicates the context
sensitive and static policies.
Shared and Non-Shared
Policies
The policy types are further subdivided by the
way they are added to a group of objects. While defining policies to
a group of objects, often it becomes necessary to define the same
policy function on all of them. For instance, in our example
database, the tables CLAIMS and CLAIM_LINES may have restrictions
based on the column CLAIM_ID, i.e. both the tables have been applied
predicate
where claim_id in (<list of claim ids>)
Since the predicate applied is the same, we can
define the same policy on both the tables and their values are
determined from the predicate function. If this is possible, then we
can define the policy as a shared one, i.e. shared between multiple
objects. Shared policies can be defined for both Static and Context
Sensitive ones. They are defined by setting the parameter
policy_type to either shared_static or shared_context_sensitive. The
following code segment creates a shared context sensitive policy.
begin
dbms_rls.add_policy (
object_schema => 'CLAIM_SCHEMA',
object_name => 'CLAIMS',
policy_name => 'CLAIM_VIEW_POLICY',
function_schema => 'CLAIM_SCHEMA',
policy_function => 'GET_AUTH_PROVIDERS',
statement_types =>
The above text is
an excerpt from:
Oracle Privacy Security Auditing
The
Final Word on Oracle Security
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only $39.95 and has an
immediate download of working security scripts:
http://rampant-books.com/book_2003_2_audit.htm
|