Statement Class to Command Mappings for Database Firewall Policies
Users can create policies based on specific commands such as INSERT, UPDATE, or DELETE. This table can help you identify which commands are a part of which statement class.
| Statement Class | Commands for Oracle | Commands for SQL Server | Commands for MySQL | Commands for DB2 LUW |
|---|---|---|---|---|
| DCL | ADMINISTER, ALTER (DCL), ALTER SESSION, ALTER SYSTEM, COMPRESSED, ENCRYPTED, CHANGE PASSWORD, GRANT, INVALID OPERATION, LOGIN, ORADEBUG, REVOKE, SET ROLE, SHUTDOWN |
ALTER AUTHORIZATION, DBCC, DENY, GRANT, LOGIN, REVOKE, SET, SETUSER, USE |
BINLOG, FLUSH, GRANT, INSTALL, KEYCACHE, KILL, PURGE, RESET, REVOKE, SET ROLE, UNINSTALL, USE |
GRANT, REVOKE, SET, TRANSFER |
| DDL | ALTER (DDL), ALTER AUDIT POLICY, ALTER DATABASE, ALTER PROFILE, ALTER TABLE, ALTER TABLESPACE, ALTER USER, ANALYZE, ASSOCIATE, AUDIT, COMMENT, CREATE, DISASSOCIATE, DROP, NOAUDIT, RENAME, TRUNCATE |
ADD, ALTER(DDL), ALTER DATABASE, ALTER TABLE, ALTER USER, CREATE, DISABLE, DROP, ENABLE, RECONFIGURE, TRUNCATE |
ALTER, CHECK, CHECKSUM, CREATE, DROP, PARTITION, RENAME, REPLACE, TRUNCATE |
ALLOCATE, ALTER, COMMENT, CREATE, DROP, RENAME, TRUNCATE |
| DML | DELETE, EXECUTE CURSOR, EXPLAIN, FLASHBACK, INSERT, LOB WRITE, MERGE, PURGE, UPDATE |
BACKUP, DELETE, INSERT, MERGE, RESTORE, UPDATE, UPDATETEXT, WRITETEXT |
ANALYZE, DELETE, GET, INSERT, LOAD, OPTIMIZE, REPAIR, UPDATE |
DELETE, EXPLAIN, INSERT, MERGE, REFRESH, UPDATE |
| Procedural | PROCEDURAL |
PROCEDURAL |
PROCEDURAL |
PROCEDURAL |
| Select | SELECT |
SELECT |
SELECT |
SELECT |
| Transaction | TRANSACTION |
TRANSACTION |
TRANSACTION |
TRANSACTION |
Note: Composite and Composite with Transaction statement classes do not have any equivalent commands, so they will not be displayed. If your policies previously used these statement classes, no commands will get automatically added to the policy during upgrade.