Oracle | LBAC_POLICY

Oracle LBAC_POLICY_ADMIN / SA_POLICY_ADMIN Version 21c

General Information

Library Note

Morgan's Library Page Header

ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling complimentary technical Workshops on Database Security for the first 30 Oracle Database customers located anywhere in North America, EMEA, LATAM, or APAC that send an email to asra_us@oracle.com. Request a Workshop for your organization today.

Purpose Label Security utility for managing schema and table policies.

SA_POLICY_ADMIN is a Public Synonym for LBAC_POLICY_ADMIN.

AUTHID DEFINER

Dependencies

LBAC_POLICY_ADMIN_INT	OLS$POL	OLS$POLT
LBAC_STANDARD	OLS$POLS	SA_POLICY_ADMIN

Documented Yes

First Available 10.1

Security Model Owned by LBACSYS with no privileges granted

Source {ORACLE_HOME}/rdbms/admin/prvtolsdd.plb

Subprograms

ALTER_SCHEMA_POLICY	DISABLE_TABLE_POLICY	POLICY_UNSUBSCRIBE
APPLY_SCHEMA_POLICY	ENABLE_SCHEMA_POLICY	REMOVE_SCHEMA_POLICY
APPLY_TABLE_POLICY	ENABLE_TABLE_POLICY	REMOVE_TABLE_POLICY
DISABLE_SCHEMA_POLICY	POLICY_SUBSCRIBE

ALTER_SCHEMA_POLICY

Alters the default options of a label security schema policy lbac_policy_admin.alter_schema_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, default_options IN VARCHAR2);

TBD

APPLY_SCHEMA_POLICY

Applies a label security schema policy lbac_policy_admin.apply_schema_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, default_options IN VARCHAR2);

TBD

APPLY_TABLE_POLICY

Applies a label security table policy lbac_policy_admin.apply_table_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, table_name IN VARCHAR2, table_options IN VARCHAR2, label_function IN VARCHAR2, predicate IN VARCHAR2);

TBD

DISABLE_SCHEMA_POLICY

Disable a table security schema policy lbac_policy_admin.disable_schema_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2);

exec lbacsys.lbac_policy_admin.disable_schema_policy('DATA_ACCESS', 'UWCLASS');

DISABLE_TABLE_POLICY

Disable a table security table policy lbac_policy_admin.disable_table_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, table_name IN VARCHAR2);

exec lbacsys.lbac_policy_admin.disable_table_policy('DATA_ACCESS', 'UWCLASS', 'AIRPLANES');

ENABLE_SCHEMA_POLICY

Enables a label security schema policy lbac_policy_admin.enable_schema_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2);

exec lbac_policy_admin.enable_schema_policy('DATA_ACCESS', 'UWCLASS');

ENABLE_TABLE_POLICY

Enables a label security table policy lbac_policy_admin.enable_table_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, table_name IN VARCHAR2);

exec lbacsys.lbac_policy_admin.enable_table_policy('DATA_ACCESS', 'UWCLASS', 'AIRPLANES');

POLICY_SUBSCRIBE

Subscribes to a label security policy lbac_policy_admin.policy_subscribe(policy_name IN VARCHAR2);

exec lbacsys.lbac_policy_admin.policy_subscribe('DATA_ACCESS');

POLICY_UNSUBSCRIBE

Unsubscribes from a label security policy lbac_policy_admin.policy_unsubscribe(policy_name IN VARCHAR2);

exec lbacsys.lbac_policy_admin.policy_unsubscribe('DATA_ACCESS');

REMOVE_SCHEMA_POLICY

Removes the label security policy from a schema lbac_policy_admin.remove_schema_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, drop_column IN BOOLEAN);

exec lbacsys.lbac_policy_admin.remove_schema_policy('DATA_ACCESS', 'UWCLASS', TRUE);

REMOVE_TABLE_POLICY

Removes the label security policy from a table lbac_policy_admin.remove_table_policy( policy_name IN VARCHAR2, schema_name IN VARCHAR2, table_name IN VARCHAR2, drop_column IN BOOLEAN);

exec lbacsys.lbac_policy_admin.remove_table_policy('DATA_ACCESS', 'UWCLASS', 'AIRPLANES', TRUE);