Oracle | DBMS

Oracle DBMS_XDBZ Version 21c

General Information

Library Note

Morgan's Library Page Header

ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling complimentary technical Workshops on Database Security for the first 30 Oracle Database customers located anywhere in North America, EMEA, LATAM, or APAC that send an email to asra_us@oracle.com. Request a Workshop for your organization today.

Purpose XDB Zecurity Utilities

AUTHID CURRENT_USER

Constants

Name	Data Type	Value
Name Format
NAME_FORMAT_SHORT	PLS_INTEGER	1
NAME_FORMAT_DISTINGUISHED	PLS_INTEGER	2
NAME_FORMAT_APPLICATION	PLS_INTEGER	5
Enable
ENABLE_CONTENTS	PLS_INTEGER	1
ENABLE_RESMETADATA	PLS_INTEGER	2
ENABLE_VERSION	PLS_INTEGER	4
ENABLE_LINKS	PLS_INTEGER	8
Is Enabled
IS_ENABLED_CONTENTS	PLS_INTEGER	1
IS_ENABLED_RESMETADATA	PLS_INTEGER	2
IS_ENABLED_VERSION	PLS_INTEGER	4
Disable & Skip
SKIP_SYSCONSACL_FLG	PLS_INTEGER	0
DISABLE_VERSION	PLS_INTEGER	1
DISABLE_ALL	PLS_INTEGER	2
Application
APPLICATION_USER	PLS_INTEGER	0
APPLICATION_ROLE	PLS_INTEGER	1
Delete App
DELETE_APP_NOFORCE	PLS_INTEGER	0
DELETE_APP_FORCE	PLS_INTEGER	1
Mode Membership
MODE_MEMBERSHIP_ADD	PLS_INTEGER	0
MODE_MEMBERSHIP_DELETE	PLS_INTEGER	1

Dependencies

DBMS_METADATA_UTIL	DBMS_XDBZ0	SECURITY_LIB
DBMS_STREAMS_CONTROL_ADM	DBMS_XDB_ADMIN	XDB_PI_TRIG
DBMS_XDBUTIL_INT	IS_VPD_ENABLED

Documented Yes

First Available Not Known

Security Model Owned by XDB with EXECUTE granted to PUBLIC

Source {ORACLE_HOME}/rdbms/admin/dbmsxdbz.sql

Subprograms

DISABLE_HIERARCHY	GET_USERID	VALIDATEACL
ENABLE_HIERARCHY	IS_HIERARCHY_ENABLED	VALIDATEFUSIONACL
GET_ACLOID	PURGELDAPCACHE

DISABLE_HIERARCHY

Disables XDB Hierarchy for a particular xmltype table/view dbms_xdbz.disable_hierarchy( object_schema IN VARCHAR2, object_name IN VARCHAR2, hierarchy_type IN PLS_INTEGER := DISABLE_ALL, delete_old_versions IN BOOLEAN := FALSE); PRAGMA SUPPLEMENTAL_LOG_DATA(disable_hierarchy, AUTO_WITH_COMMIT);

TBD

ENABLE_HIERARCHY

Enables XDB Hierarchy for a particular xmltype table/view dbms_xdbz.enable_hierarchy( object_schema IN VARCHAR2, object_name IN VARCHAR2, hierarchy_type IN PLS_INGTEGER := ENABLE_CONTENTS, schemareg IN BOOLEAN := FALSE); PRAGMA SUPPLEMENTAL_LOG_DATA(enable_hierarchy, AUTO_WITH_COMMIT);

TBD

GET_ACLOID

Get's an ACL OID given the XDB Hierarchy path for the ACL Resource dbms_xdbz.get_acloid( aclpath IN VARCHAR2, acloid OUT RAW) RETURN BOOLEAN;

TBD

GET_USERID

Retrieves the userid for the given user name dbms_xdbz.get_userid( username IN VARCHAR2, userid OUT RAW, format IN PLS_INTEGER := NAME_FORMAT_SHORT) RETURN BOOLEAN;

DECLARE

       outVal VARCHAR2(30);

       retVal BOOLEAN;

      BEGIN

        retVal := xdb.dbms_xdbz.get_userid('C##SH', outVal);

        dbms_output.put_line(outVal);

      END;

      /

      00000069

      

      PL/SQL procedure successfully completed.

IS_HIERARCHY_ENABLED

Checks if the XDB Hierarchy is enabled for a given xmltype table/view dbms_xdbz.is_hierarchy_enabled( object_schema IN VARCHAR2, object_name IN VARCHAR2, hierarchy_type IN PLS_INTEGER := IS_ENABLED_CONTENTS) RETURN BOOLEAN;

TBD

PURGELDAPCACHE

Purges LDAP nickname cache dbms_xdbz.purgeLdapCache RETURN BOOLEAN;

BEGIN

        IF xdb.dbms_xdbz.purgeLdapCache THEN

          dbms_output.put_line('T');

        ELSE

          dbms_output.put_line('F');

        END IF;

      END;

      /

      F

VALIDATEACL

Validates the security class, specified roles, custom privs, parent ACL security class of an ACL dbms_xdbz.validateACL( acloid IN RAW, skip_scacl IN PLS_INTEGER := SKIP_SYSCONSACL_FLG);

TBD

VALIDATEFUSIONACL

For an ACL chain validates the system constraining ACL, non-system constraining ACL, constraining relationship, if any, between a parent and child ACL dbms_xdbz.validateFusionACL(acloid IN RAW);

TBD