Skip Headers
Oracle® Label Security Administrator's Guide
12c Release 1 (12.1)

E17730-12
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Master Index
Master Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
PDF · Mobi · ePub

A Disabling and Enabling Oracle Label Security

This appendix contains:

When You Must Disable Oracle Label Security

You may need to disable Oracle Label Security to perform upgrade tasks or correct erroneous configurations. Another reason for disabling Oracle Label Security is if you want to test an application without enforcing Oracle Label Security. You can reenable Oracle Label Security after you complete the tasks.

Checking if Oracle Label Security Is Enabled or Disabled

To find if Oracle Label Security has been enabled or disabled, query the V$OPTION data dictionary view. Any user can query this view. If Oracle Label Security is enabled, then the query returns TRUE. Otherwise, it returns FALSE. Remember that the PARAMETER column value is case sensitive. For example:

SELECT VALUE FROM V$OPTION WHERE PARAMETER = 'Oracle Label Security';

Disabling Oracle Label Security

If Oracle Database Vault has been enabled, then do not disable Oracle Label Security. See Oracle Database Vault Administrator's Guide to find if Database Vault has been enabled.

  1. Log into the database instance as user SYS or a user who has been granted the LBAC_DBA role.

    For example:

    sqlplus psmith_ols -- Or, psmith_ols@hrpdb for the hrpdb pluggable database (PDB)
    Enterp password: password
    
  2. Run the following procedure:

    EXEC LBACSYS.OLS_ENFORCEMENT.DISABLE_OLS;
    
  3. Restart the database.

    For example:

    CONNECT SYS AS SYSOPER
    Enter password: password
    
    SHUTDOWN IMMEDIATE
    STARTUP
    
  4. For Oracle Real Application Cluster (Oracle RAC) environment or a multitenant environment, repeat these steps for each Oracle RAC node or PDB on which you enabled Oracle Label Security.

Enabling Oracle Label Security

  1. Log into the database instance as user SYS or a user who has been granted the LBAC_DBA role.

    For example:

    sqlplus psmith_ols -- Or, psmith_ols@hrpdb for the hrpdb PDB
    Enterp password: password
    
  2. Run the following procedure:

    EXEC LBACSYS.OLS_ENFORCEMENT.ENABLE_OLS;
    
  3. Restart the database.

    For example:

    CONNECT SYS AS SYSOPER
    Enter password: password
    
    SHUTDOWN IMMEDIATE
    STARTUP
    
  4. For Oracle Real Application Cluster (Oracle RAC) environment or a multitenant environment, repeat these steps for each Oracle RAC node or PDB on which you disabled Oracle Label Security.