General Information
Library Note
Morgan's Library Page Header
ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling
complimentary technical Workshops on Database Security for the first 30
Oracle Database customers located anywhere in North America, EMEA, LATAM, or
APAC that send an email to
asra_us@oracle.com . Request a Workshop for
your organization today.
Purpose
Oracle Label Security Internal Policy Administration Utilities
AUTHID
CURRENT_USER
Dependencies
ALL_USERS
LBAC_POLICY_ADMIN
OLS$POL
LBAC$USER_LIBT
LBAC_SERVICES
OLS$POLS
LBAC_CACHE
LBAC_STANDARD
OLS$POLT
LBAC_NAME_LIST
Documented
No
First Available
20c
Security Model
Owned by SYS with EXECUTE granted to PUBLIC
Source
{ORACLE_HOME}/rdbms/admin/prvtolsdd.plb
Subprograms
ALTER_SCHEMA_POLICY
Modify a schema policy
lbac_policy_admin_int.alter_schema_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
default_options IN VARCHAR2,
username IN VARCHAR2);
TBD
APPLY_SCHEMA_POLICY
Apply a schema policy
lbac_policy_admin_int.apply_schema_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
default_options IN VARCHAR2,
username IN VARCHAR2)
TBD
APPLY_TABLE_POLICY
Apply a table policy
lbac_policy_admin_int.apply_table_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
table_name IN VARCHAR2,
table_options IN VARCHAR2,
label_function IN VARCHAR2,
predicate IN VARCHAR2,
username IN VARCHAR2);
TBD
DISABLE_SCHEMA_POLICY
Disable a schema policy
lbac_policy_admin_int.disable_schema_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
username IN VARCHAR2);
exec lbac_policy_admin_int.disable_schema_policy ('DATA_ACCESS', 'HR', 'UWCLASS');
DISABLE_TABLE_POLICY
Disable a table policy
lbac_policy_admin_int.disable_table_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
table_name IN VARCHAR2,
username IN VARCHAR2);
exec lbac_policy_admin_int.disable_table_policy ('DATA_ACCESS', 'HR', 'EMPLOYEES', 'UWCLASS');
ENABLE_SCHEMA_POLICY
Enable a schema policy
lbac_policy_admin_int.enable_schema_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
username IN VARCHAR2);
exec lbac_policy_admin_int.enable_schema_policy ('DATA_ACCESS', 'HR', 'UWCLASS');
ENABLE_TABLE_POLICY
Enable a table policy
lbac_policy_admin_int.enable_table_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
table_name IN VARCHAR2,
username IN VARCHAR2);
exec lbac_policy_admin_int.enable_table_policy ('DATA_ACCESS', 'HR', 'EMPLOYEES', 'UWCLASS');
POLICY_SUBSCRIBE
Subscribe to a policy
lbac_policy_admin_int.policy_subscribe(
policy_name IN VARCHAR2,
username IN VARCHAR2);
exec lbac_policy_admin_int.policy_subscribe ('DATA_ACCESS', 'UWCLASS');
POLICY_UNSUBSCRIBE
Unsubscribe from a policy
lbac_policy_admin_int.policy_unsubscribe(
policy_name IN VARCHAR2,
username IN VARCHAR2);
exec lbac_policy_admin_int.policy_unsubscribe ('DATA_ACCESS', 'UWCLASS');
REMOVE_SCHEMA_POLICY
Remove a schema policy
lbac_policy_admin_int.remove_schema_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
drop_column IN BOOLEAN,
username IN VARCHAR2);
TBD
REMOVE_TABLE_POLICY
Remove a table policy
lbac_policy_admin_int.remove_table_policy(
policy_name IN VARCHAR2,
schema_name IN VARCHAR2,
table_name IN VARCHAR2,
drop_column IN BOOLEAN,
username IN VARCHAR2);
TBD