Configuring an Oracle Virtual Private Database Policy
Table 8–1 lists the procedures in the DBMS_RLS package. Table 8–1
DBMS_RLS Procedures
Procedure
Description
For Handling Individual Policies DBMS_RLS.ADD_POLICY
Adds a policy to a table, view, or synonym
DBMS_RLS.ENABLE_POLICY
Enables (or disables) a policy you previously added to a table, view, or synonym
DBMS_RLS.REFRESH_POLICY
Invalidates cursors associated with nonstatic policies
DBMS_RLS.DROP_POLICY
To drop a policy from a table, view, or synonym
For Handling Grouped Policies DBMS_RLS.CREATE_POLICY_GROUP
Creates a policy group
DBMS_RLS.DELETE_POLICY_GROUP
Drops a policy group
DBMS_RLS.ADD_GROUPED_POLICY
Adds a policy to the specified policy group
DBMS_RLS.ENABLE_GROUPED_POLICY
Enables a policy within a group
DBMS_RLS.REFRESH_GROUPED_POLICY
Parses again the SQL statements associated with a refreshed policy
DBMS_RLS.DISABLE_GROUPED_POLICY
Disables a policy within a group
DBMS_RLS.DROP_GROUPED_POLICY
Drops a policy that is a member of the specified group
For Handling Application Contexts DBMS_RLS.ADD_POLICY_CONTEXT
Adds the context for the active application
DBMS_RLS.DROP_POLICY_CONTEXT
Drops the context for the application
See Also: ■
■
■
"Components of an Oracle Virtual Private Database Policy" on page 8-4 for a description of the type of function that you need to create to control user access to a database table, view, or synonym Chapter 7, "Using Application Contexts to Retrieve User Information" if you plan to use application contexts in the Oracle Virtual Private Database policy (which in most cases, you would) "Examples: Creating Oracle Virtual Private Database Policies" on page 8-21 for examples of using application contexts in sample Oracle Virtual Private Database functions
Attaching a Policy a Database Table, View, or Synonym To attach a policy to a table, view, or synonym, you use the DBMS_RLS.ADD_POLICY procedure. You need to specify the table, view, or synonym to which you are adding a policy, and a name for the policy. You can also specify other information, such as the types of statements the policy controls (SELECT, INSERT, UPDATE, DELETE, CREATE INDEX, or ALTER INDEX).
8-6
Oracle Database Security Guide