ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling
complimentary technical Workshops on Database Security for the first 30
Oracle Database customers located anywhere in North America, EMEA, LATAM, or
APAC that send an email to
asra_us@oracle.com. Request a Workshop for
your organization today.
Purpose
Provides integration between Database Vault and Label Security's LBACSYS.SA_SESSION package
AUTHID
DEFINER
Constants
Name
Data Type
Value
Audit Action Code
G_MAC_OLS_UPGRADE_AUDIT_CODE
PLS_INTEGER
10010
Dependencies
CODE$
DV$CODE
OLS$LAB
DBMS_MACAUD
MAC_POLICY$
OLS$POL
DBMS_MACOLS
NUMERIC_DOMINATES
SA_SESSION
DBMS_MACUTL
NUMERIC_LABEL_TO_CHAR
SA_UTL
DBMS_STANDARD
NUMERIC_STRICTLY_DOMINATES
TO_NUMERIC_LABEL
Documented
No
Exceptions
Error Code
Reason
ORA-47907
Database Vault associated OLS policy <policy_name> not fully configured
Audit invalid attempt to set/change the label for a policy beyond max session label and raise the appropriate exception.
This procedure is invoked by sa_session.set_label, sa_session.set_access_profile, and sa_session.restore_default_labels
in two cases: the label to set is beyond the max session label
or the max_session_label is NULL.
dbms_macols_session.label_audit_raise(
policy_name IN VARCHAR2,
label IN VARCHAR2,
proc_name IN VARCHAR2);
PRAGMA SUPPLEMENTAL_LOG_DATA(label_audit_raise, NONE);
MAC OLS processing to merge default session label for a policy with the labels of any factors associated to the policy after the SA_SESSION restore_default_labels method is called
dbms_macols_session.restore_default_labels(
policy_name IN VARCHAR2,
x_session_label OUT VARCHAR2,
x_mac_label OUT VARCHAR2);
PRAGMA SUPPLEMENTAL_LOG_DATA(restore_default_labels, NONE);
exec dbms_macols_session.label_audit_raise('UWSecPol', 'UWLabel', 'UWProc');
*
ERROR at line 1:
ORA-47907: Database Vault associated OLS policy UWSecPol not fully configured
ORA-06512: at "DVSYS.DBMS_MACUTL", line 34
ORA-06512: at "DVSYS.DBMS_MACUTL", line 389
ORA-06512: at "DVSYS.DBMS_MACOLS_SESSION", line 142
ORA-06512: at line 1
MAC OLS processing to merge default session label for a policy with the exist MAX session label after the SA_SESSION set_access_profile method is called
dbms_macols_session.set_access_profile(
policy_name IN VARCHAR2 ,
user_name IN VARCHAR2,
p_max_session_label IN VARCHAR2,
x_new_session_label OUT VARCHAR2)
RETURN NUMBER;
Sets the MAC OLS session context variable for the attribute specified
dbms_macols_session.set_policy_label_context(
policy_name IN VARCHAR2,
label IN VARCHAR2,
attribute IN VARCHAR2);
PRAGMA SUPPLEMENTAL_LOG_DATA(set_policy_label_context, NONE);