Oracle | DBMS

Oracle DBMS_XDBZ Version 21c

General Information

Library Note

Morgan's Library Page Header

Which has the higher priority in your organization: Deploying a new database or securing the ones you already have? Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.

Purpose XDB Zecurity Utilities

AUTHID CURRENT_USER

Constants

Name	Data Type	Value
Name Format
NAME_FORMAT_SHORT	PLS_INTEGER	1
NAME_FORMAT_DISTINGUISHED	PLS_INTEGER	2
NAME_FORMAT_APPLICATION	PLS_INTEGER	5
Enable
ENABLE_CONTENTS	PLS_INTEGER	1
ENABLE_RESMETADATA	PLS_INTEGER	2
ENABLE_VERSION	PLS_INTEGER	4
ENABLE_LINKS	PLS_INTEGER	8
Is Enabled
IS_ENABLED_CONTENTS	PLS_INTEGER	1
IS_ENABLED_RESMETADATA	PLS_INTEGER	2
IS_ENABLED_VERSION	PLS_INTEGER	4
Disable & Skip
SKIP_SYSCONSACL_FLG	PLS_INTEGER	0
DISABLE_VERSION	PLS_INTEGER	1
DISABLE_ALL	PLS_INTEGER	2
Application
APPLICATION_USER	PLS_INTEGER	0
APPLICATION_ROLE	PLS_INTEGER	1
Delete App
DELETE_APP_NOFORCE	PLS_INTEGER	0
DELETE_APP_FORCE	PLS_INTEGER	1
Mode Membership
MODE_MEMBERSHIP_ADD	PLS_INTEGER	0
MODE_MEMBERSHIP_DELETE	PLS_INTEGER	1

Dependencies

DBMS_METADATA_UTIL	DBMS_XDBZ0	SECURITY_LIB
DBMS_STREAMS_CONTROL_ADM	DBMS_XDB_ADMIN	XDB_PI_TRIG
DBMS_XDBUTIL_INT	IS_VPD_ENABLED

Documented Yes

First Available Not Known

Security Model Owned by XDB with EXECUTE granted to PUBLIC

Source {ORACLE_HOME}/rdbms/admin/dbmsxdbz.sql

Subprograms

DISABLE_HIERARCHY	GET_USERID	VALIDATEACL
ENABLE_HIERARCHY	IS_HIERARCHY_ENABLED	VALIDATEFUSIONACL
GET_ACLOID	PURGELDAPCACHE

DISABLE_HIERARCHY

Disables XDB Hierarchy for a particular xmltype table/view dbms_xdbz.disable_hierarchy( object_schema IN VARCHAR2, object_name IN VARCHAR2, hierarchy_type IN PLS_INTEGER := DISABLE_ALL, delete_old_versions IN BOOLEAN := FALSE); PRAGMA SUPPLEMENTAL_LOG_DATA(disable_hierarchy, AUTO_WITH_COMMIT);

TBD

ENABLE_HIERARCHY

Enables XDB Hierarchy for a particular xmltype table/view dbms_xdbz.enable_hierarchy( object_schema IN VARCHAR2, object_name IN VARCHAR2, hierarchy_type IN PLS_INGTEGER := ENABLE_CONTENTS, schemareg IN BOOLEAN := FALSE); PRAGMA SUPPLEMENTAL_LOG_DATA(enable_hierarchy, AUTO_WITH_COMMIT);

TBD

GET_ACLOID

Get's an ACL OID given the XDB Hierarchy path for the ACL Resource dbms_xdbz.get_acloid( aclpath IN VARCHAR2, acloid OUT RAW) RETURN BOOLEAN;

TBD

GET_USERID

Retrieves the userid for the given user name dbms_xdbz.get_userid( username IN VARCHAR2, userid OUT RAW, format IN PLS_INTEGER := NAME_FORMAT_SHORT) RETURN BOOLEAN;

DECLARE

       outVal VARCHAR2(30);

       retVal BOOLEAN;

      BEGIN

        retVal := xdb.dbms_xdbz.get_userid('C##SH', outVal);

        dbms_output.put_line(outVal);

      END;

      /

      00000069

      

      PL/SQL procedure successfully completed.

IS_HIERARCHY_ENABLED

Checks if the XDB Hierarchy is enabled for a given xmltype table/view dbms_xdbz.is_hierarchy_enabled( object_schema IN VARCHAR2, object_name IN VARCHAR2, hierarchy_type IN PLS_INTEGER := IS_ENABLED_CONTENTS) RETURN BOOLEAN;

TBD

PURGELDAPCACHE

Purges LDAP nickname cache dbms_xdbz.purgeLdapCache RETURN BOOLEAN;

BEGIN

        IF xdb.dbms_xdbz.purgeLdapCache THEN

          dbms_output.put_line('T');

        ELSE

          dbms_output.put_line('F');

        END IF;

      END;

      /

      F

VALIDATEACL

Validates the security class, specified roles, custom privs, parent ACL security class of an ACL dbms_xdbz.validateACL( acloid IN RAW, skip_scacl IN PLS_INTEGER := SKIP_SYSCONSACL_FLG);

TBD

VALIDATEFUSIONACL

For an ACL chain validates the system constraining ACL, non-system constraining ACL, constraining relationship, if any, between a parent and child ACL dbms_xdbz.validateFusionACL(acloid IN RAW);

TBD