Index
A
- access control
- access mediation
- ADD_GROUPS procedure
- inverse groups 16.8.3
- ALL_CONTROL option 11.1.3, 11.1.4, 11.1.8
- ALL_SA_AUDIT_OPTIONS view F.2.1
- ALL_SA_COMPARTMENTS view F.2.2, F.2.16
- ALL_SA_DATA_LABELS view F.2.3, F.2.17
- ALL_SA_GROUPS view F.2.4, F.2.18
- ALL_SA_LABELS view F.2.5
- ALL_SA_LEVELS view F.2.6
- ALL_SA_POLICIES view F.2.7
- ALL_SA_PROG_PRIVS view F.2.8
- ALL_SA_SCHEMA_POLICIES view F.2.9
- ALL_SA_TABLE_POLICIES view F.2.10
- ALL_SA_USER_LABELS view F.2.12
- ALL_SA_USER_LEVELS view F.2.13
- ALL_SA_USER_PRIVS view F.2.14
- ALL_SA_USERS view F.2.11
- ALTER_GROUP_PARENT
- inverse groups 16.8.10
- ALTER_GROUPS procedure
- inverse groups 16.8.4
- ALTER_POLICY procedure
- inverse groups 16.8.2
- ANALYZE command 15.4.1
- APPLY_SCHEMA_POLICY procedure
- with inverse groups 16.3.1
- APPLY_TABLE_POLICY procedure
- with inverse groups 16.3.1
- architecture, Oracle Label Security 1.6
- AS SYSDBA clause 15.5.3
- AUDIT_LABEL_ENABLED function E.1.4
- AUDIT_TRAIL parameter 13.2
- auditing
- audit trails 13.1, 13.2, E.1.5
- creating audit view E.1.5
- disabling E.1.8
- dropping audit view E.1.6
- enabling
- SA_AUDIT_ADMIN.AUDIT procedure E.1.2
- finding audit options F.2.1
- finding if labels are recorded E.1.4
- Oracle Label Security 13.1, 13.4
- recording policy labels E.1.3
- SA_AUDIT_ADMIN.AUDIT_LABEL_ENABLED function E.1.4
- SA_AUDIT_ADMIN.AUDIT_LABEL procedure E.1.3
- SA_AUDIT_ADMIN.CREATE_VIEW procedure E.1.5
- SA_AUDIT_ADMIN.DROP_VIEW procedure E.1.6
- SA_AUDIT_ADMIN.NOAUDIT_LABEL procedure E.1.8
- SA_AUDIT_ADMIN package E.1.1
- strategy 13.5.1
- systemwide 13.2
- types of 5.9.8
- views E.1.5
C
- CDBs
- Oracle Label Security 1.9.2
- CHAR_TO_LABEL function 6.3.1, 6.5.2, 6.5.6
- CHECK_CONTROL option
- CHECK_WRITE function E.8.4
- child rows
- Cloud Control login 5.9.1
- COMPACCESS privilege 3.5.2.3
- compartments
- altering E.2.2
- creating E.2.6
- definition 2.3.3, 5.3.4
- deleting E.2.9
- example 2.3.3, 5.3.4
- finding F.2.27
- finding compartments user can read in session E.5.2
- finding compartments user can write to in session E.5.3
- finding user information F.2.2
- SA_COMPONENTS.ALTER_COMPARTMENT procedure E.2.2
- SA_COMPONENTS.CREATE_COMPARTMENT procedure E.2.6
- SA_COMPONENTS.DROP_COMPARTMENT procedure E.2.9
- SA_USER_ADMIN.ADD_COMPARTMENTS procedure E.7.2
- SA_USER_ADMIN.ALTER_COMPARTMENTS E.7.4
- SA_USER_ADMIN.DROP_COMPARTMENTS procedure E.7.8
- SA_USER_ADMIN.SET_COMPARTMENTS procedure E.7.11
- SA_USER_ADMIN package E.7.1
- setting authorizations 3.3.1.2, 5.4.4
- tutorial on using 9.1
- components
- CON C.4.1
- configuration of Oracle Label security
- finding status F.2.32
- connection parameters C.4.1
- CREATE_GROUP procedure
- inverse groups 16.8.9
- CREATE_POLICY procedure
- inverse groups 16.8.1
- CREATE FUNCTION statement 12.4.1
- CREATE PACKAGE BODY statement 12.4.1
- CREATE PACKAGE statement 12.4.1
- CREATE PROCEDURE statement 12.4.1
- CREATE TABLE AS SELECT statement G
- creating databases 15.5.1
D
- data
- label-based access 2.1
- database links 14.2
- databases, creating additional 15.5.1
- data dictionary tables 2.2, 15.4.1, 15.5.1, F.1
- data labels
- Data Pump export
- row labels 15.1.2
- Data Pump import 15.2
- DBA_OLS_STATUS data dictionary view 4.1.2
- DBA_OLS_STATUS view F.2.32
- DBA_policyname_AUDIT_TRAIL view F.3
- DBA_SA_AUDIT_OPTIONS view F.2.15
- DBA_SA_COMPARTMENTS view 15.2.2.2, F.2.16
- DBA_SA_DATA_LABELS view F.2.17
- DBA_SA_GROUP_HIERARCHY view F.2.19
- DBA_SA_GROUPS view 15.2.2.2, F.2.18
- DBA_SA_LABELS view 15.2.2.2, F.2.20
- DBA_SA_LEVELS view 15.2.2.2, F.2.21
- DBA_SA_POLICIES view F.2.22
- DBA_SA_PROG_PRIVS view F.2.23
- DBA_SA_SCHEMA_POLICIES view 11.1.11, F.2.24
- DBA_SA_TABLE_POLICIES view 11.1.11, F.2.25
- DBA_SA_USER_COMPARTMENTS view F.2.27
- DBA_SA_USER_GROUPS view F.2.28
- DBA_SA_USER_LABELS view F.2.29
- DBA_SA_USER_LEVELS view F.2.30
- DBA_SA_USER_PRIVS view F.2.31
- DBA_SA_USERS view F.2.26
- default port C.4.1
- default row label E.5.19
- DELETE_CONTROL option 11.1.4, 11.5
- DELETERESTRICT option 11.5
- deleting labeled data 11.5
- demobld.sql file 1.8
- disabling OLS A.2
- disabling Oracle Label Security A
- discretionary access control (DAC) 3.5.4
- distributed databases
- dominance
- DOMINATED_BY function B.1.3.9
- DOMINATES function B.1.1
- dropping for specified compartments E.7.8
- DROP USER CASCADE restriction G
- duties
- of security administrators 1.4
E
G
- granularity
- to data access 3.4.3
- GREATEST_LBOUND function
- inverse groups 16.8.14
- groups
- altering E.2.3
- altering parent groups E.2.4
- creating group parent E.2.7
- definition 2.3.4, 5.3.6
- deleting E.2.10
- example 2.3.4, 5.3.6
- finding for entire database F.2.28
- finding hierarchy of parent-child relationships F.2.19
- finding policy groups F.2.4
- hierarchical 2.3.4, 2.5, 5.3.6, F.2.19
- inverse 16.2
- parent 2.3.4, 3.4.1.2, 5.3.6, 16.3.4
- read/write access 3.4.1.2
- SA_COMPONENTS.ALTER_GROUP_PARENT procedure E.2.4
- SA_COMPONENTS.ALTER_GROUP procedure E.2.3
- SA_COMPONENTS.CREATE_GROUP procedure E.2.7
- SA_COMPONENTS.DROP_GROUP E.2.10
- SA_SESSION.GROUP_READ function E.5.4
- SA_SESSION.GROUP_WRITE function E.5.5
- SA_USER_ADMIN.ADD_GROUPS procedure E.7.3
- SA_USER_ADMIN.ALTER_GROUPS procedure E.7.5
- SA_USER_ADMIN.DROP_ALL_GROUPS procedure E.7.7
- SA_USER_ADMIN.DROP_GROUPS procedure E.7.9
- SA_USER_ADMIN.SET_GROUPS procedure E.7.13
- SA_USER_ADMIN package E.7.1
- setting authorizations 3.3.1.3, 5.4.6
- tutorial on using 10.1
I
- impdp
- See: Data Pump import
- Import utility
- importing labeled data 15.2.2.1.2, 15.2.2.2
- importing policies 15.1.2
- importing unlabeled data 15.2.2.4
- with Oracle Label Security 15.2.2
- indexes 15.4.2
- INITIAL_LABEL variable B.3.1
- INITIAL_ROW_LABEL variable B.3.1
- initialization parameters
- AUDIT_TRAIL 13.2
- INSERT_CONTROL option 11.1.4, 11.3.1
- inserting labeled data 6.5.1, 11.3
- INTO TABLE clause 15.3.2
- invalid objects, troubleshooting I.1
- INVERSE_GROUP enforcement option
- inverse groups
- and label components 16.3.2
- COMPACCESS privilege 16.3.5, 16.6
- computed labels 16.3.3
- dominance 16.9
- implementation of 16.3
- introduction 16.2
- Max Read Groups 16.3.3.2
- Max Write Groups 16.3.3.2
- parent-child unsupported 16.3.4
- read algorithm 16.4
- session labels 16.7
- SET_DEFAULT_LABEL 16.7.1
- SET_LABEL 16.7.2.1
- SET_ROW_LABEL 16.7.1, 16.7.2.1
- user privileges 16.3.5
- write algorithm 16.5
L
- LABEL_DEFAULT option
- LABEL_TO_CHAR function 6.3.2.1, 6.3.2.2, 6.4.3
- LABEL_UPDATE option
- label-based security 2.1
- label components
- label evaluation process
- labeling functions
- ALL_CONTROL and NO_CONTROL 11.1.8
- and CHECK_CONTROL 11.3.1
- and LABEL_DEFAULT 11.1.6.3, 11.2.1
- and LABEL_DEFAULTlLABEL_DEFAULT option
- and labeling functions 11.1.6.2
- and LABEL_UPDATE 11.1.6, 11.1.6.4
- and LBACSYS 11.2.2
- creating 11.2.3
- example 11.2.1
- how they work 11.2.2
- importing unlabeled data 15.2.2.4
- in force 11.1.6
- inserting data 6.5.4
- introduction 3.5.7
- override manual insert 11.3.2
- specifying 11.2.4
- testing 11.2.2
- UPDATE 11.4.3
- using 11.2.1
- with enforcement options 11.1.9
- label policy containers
- creating 5.2.2
- labels E.8.5, E.8.10
- administering 2.6
- altering E.3.2
- and performance 3.5.2.1
- checking if a data label E.8.5
- checking if changed E.8.2
- creating E.3.3
- data and user 2.5
- deleting E.3.4
- finding greatest lower bound E.8.6
- finding least upper bound E.8.7
- finding tags and types of F.2.5
- merging 6.4.5
- non-comparable B.1.2
- relationships between B.1
- restoring default for session E.5.13
- SA_LABEL_ADMIN.ALTER_LABEL procedure E.3.2
- SA_LABEL_ADMIN.CREATE_LABEL procedure E.3.3
- SA_LABEL_ADMIN.DROP_LABEL procedure E.3.4
- SA_LABEL_ADMIN package E.3.1
- SA_SESSION.LABEL function E.5.6
- SA_SESSION.MAX_READ_LABEL function E.5.8
- SA_SESSION.MAX_WRITE_LABEL function E.5.9
- SA_SESSION.MIN_WRITE_LABEL function E.5.11
- SA_SESSION.RESTORE_DEFAULT_LABELS E.5.13
- SA_SESSION.SET_LABEL procedure E.5.15
- SA_SESSION.SET_ROW_LABEL procedure E.5.19
- SA_USER_ADMIN.SET_USER_LABELS procedure E.7.17
- SA_USER_ADMIN package E.7.1
- SA_UTL.CHECK_LABEL_CHANGE function E.8.2
- SA_UTL.GREATEST_LBOUND function E.8.6
- SA_UTL.LEAST_UBOUNDfunction E.8.7
- SA_UTL.SET_LABEL procedure E.8.10
- saving default session label E.5.17
- setting row label E.5.19
- syntax 2.4, 5.3.8
- valid 2.4, 5.3.9, 6.1.2.1
- with inverse groups 16.3.3
- label tags
- LBAC_LABEL data type 11.2.2
- LBACSYS
- LBACSYS default user account
- LBACSYS schema
- LEAST_UBOUND function
- inverse groups 16.8.13
- levels
- about 5.3.2
- altering levels E.2.5
- creating E.2.8
- definition 2.3.2, 5.3.2
- deleting E.2.11
- example 2.3.2, 5.3.2
- finding F.2.6
- SA_COMPONENTS.ALTER_LEVEL procedure E.2.5
- SA_COMPONENTS.CREATE_LEVEL procedure E.2.8
- SA_COMPONENTS.DROP_LEVEL procedure E.2.11
- SA_SESSION.MAX_LEVEL function E.5.7
- SA_SESSION.MIN_LEVEL function E.5.10
- SA_USER_ADMIN.SET_LEVELS procedure E.7.14
- setting authorizations 3.3.1.1, 5.4.2
- tutorial on using 8.1
- logging into Oracle Label Security
- login
O
- object privileges
- OCI_ATTR_APPCTX_LIST B.3.2
- OCI_ATTR_APPCTX_SIZE B.3.2
- OCIAttrSet B.3.1, B.3.2
- OCI interface B.3.1
- OCIParamGet B.3.2
- OLS_DOMINATED_BY function B.1.3.5
- OLS_DOMINATES function B.1.3.2
- OLS_GLBD function 6.4.4.2
- OLS_GREATEST_LBOUND function 6.4.4.2
- OLS_LABEL_DOMINATES function
- OLS_LEAST_UBOUND function 6.4.4.1
- OLS_LUBD function 6.4.4.1
- OLS_STRICTLY_DOMINATED_BY function B.1.3.6
- OLS_STRICTLY_DOMINATES function B.1.3.4
- olsadmintool commannds
- addadmin C.3.2
- addpolcreator C.3.3
- adduser C.3.4
- altercompartent C.3.5
- altergroup C.3.6
- altergroupparent C.3.7
- alterlabel C.3.8
- alterlevel C.3.9
- alterpolicy C.3.10
- audit C.3.11
- createcompartment C.3.12
- creategroup C.3.13
- createlabel C.3.14
- createlevel C.3.15
- createpolicy C.3.17
- createprofile C.3.16
- describeprofile C.3.18
- dropadmin C.3.19
- dropcompartment C.3.20
- dropgroup C.3.21
- droplabel C.3.22
- droplevel C.3.23
- droppolcreator C.3.26
- droppolicy C.3.24
- dropprofile C.3.25
- dropuser C.3.27
- help C.3.28
- listprofile C.3.29
- noaudit C.3.30
- olsoidsync commannd C.6
- OptionsA C.4.2
- ORA-6550 errors, troubleshooting I.2
- ORA-942 errors, troubleshooting I.2
- Oracle Database Vault
- using OLS_LABEL_DOMINATES function with B.1.3.3
- Oracle Data Redaction
- using OLS_LABEL_DOMINATES function with B.1.3.3
- Oracle Enterprise Manager
- administering labels 2.6
- Oracle Internet Directory
- configuring OLS after switchover to standby database 7.10.5
- integration with OLS 1.9.1
- OID with Oracle Data Guard 7.10.5
- Oracle Label Security
- about 7.1
- administrator duties in 7.8
- bootstrapping databases 7.9
- configuring, about 7.2.1
- configuring, permission for 7.2.2
- configuring, steps 7.2.3
- integrated capabilities of 7.4
- PL/SQL procedures for policy administrators 7.13
- policy attributes in 7.5
- profiles, about 7.3
- provisioning profiles, about 7.10.2
- provisioning profiles, changing database connection information 7.10.4
- provisioning profiles, managing 7.10.3
- restrictions on new data label creation 7.7
- security roles and permitted actions 7.11.1
- subscribing policies in 7.6
- superseded PL/SQL statements 7.12
- synchronizing database with OID 7.10.1
- un-registering database 7.2.4
- Oracle Label Security
- Oracle Label Security (OLS)
- integration with Oracle Internet Directory 1.9.1
- Oracle Label Security data dictionary views
- about F.2
- ALL_SA_AUDIT_OPTIONS F.2.1
- ALL_SA_COMPARTMENTS F.2.2, F.2.16
- ALL_SA_DATA_LABELS F.2.3, F.2.17
- ALL_SA_GROUPS F.2.4, F.2.18
- ALL_SA_LABELS F.2.5
- ALL_SA_LEVELS F.2.6, F.2.21
- ALL_SA_POLICIES F.2.7
- ALL_SA_PROG_PRIVS F.2.8
- ALL_SA_SCHEMA_POLICIES F.2.9
- ALL_SA_TABLE_POLICIES F.2.10
- ALL_SA_USER_LABELS F.2.12
- ALL_SA_USER_LEVELS F.2.13
- ALL_SA_USER_PRIVS F.2.14
- ALL_SA_USERS F.2.11
- DBA_OLS_STATUS F.2.32
- DBA_SA_AUDIT_OPTIONS F.2.15
- DBA_SA_GROUP_HIERARCHY F.2.19
- DBA_SA_LABELS F.2.20
- DBA_SA_POLICIES F.2.22
- DBA_SA_PROG_PRIVS F.2.23
- DBA_SA_SCHEMA_POLICIES F.2.24
- DBA_SA_TABLE_POLICIES F.2.25
- DBA_SA_USER_COMPARTMENTS F.2.27
- DBA_SA_USER_GROUPS F.2.28
- DBA_SA_USER_LABELS F.2.29
- DBA_SA_USER_LEVELS F.2.30
- DBA_SA_USER_PRIVS F.2.31
- DBA_SA_USERS F.2.26
- policies
- finding information about schema policies F.2.9
- USER_SA_SESSION F.2.33
- Oracle Label Security profiles 7.3
- ORDER BY clause 6.4.2
P
- packages
- partitioning 6.1.2.3, 15.4.4
- PDBs
- Oracle Label Security 1.9.2
- performance, Oracle Label Security
- PL/SQL
- pluggable databases
- See: PDBs
- policies
- about creating 5.6.1
- enforcement guidelines 11.1.9
- enforcement options 3.5.7, 6, 11.1.1, 11.1.2, 11.1.9
- finding for current user F.2.7
- finding for entire database F.2.22
- finding information about table policies F.2.10
- finding privileges for program units F.2.8
- multiple 2.2, 6.1.2.1
- OID subscription E.4.9
- OID unsubscription E.4.10
- privileges 3.5.4, E.7.18
- SA_POLICY_ADMIN.POLICY_SUBSCRIBE procedure E.4.9
- SA_POLICY_ADMIN.POLICY_UNSUBSCRIBE procedure E.4.10
- SA_POLICY_ADMIN package E.4.1
- policies, schema
- policies, schema, disabling
- SA_POLICY_ADMIN.DISABLE_SCHEMA_POLICY procedure E.4.5
- policies, table
- policy_DBA role 2.2, E.3.1, E.7.18
- about 1.4
- auditing policy_DBA role users E.1.2
- how to use 1.4
- required for Data Pump import operations 15.2.2.1.2
- required for label management E.3.1
- required for Oracle Label Security auditing E.1.1
- required for SA_USER_ADMIN.SET_PROG_PRIVS procedure E.7.15
- required for SA_USER_ADMIN.SET_USER_PRIVS procedure E.7.18
- policy label column
- policy label containers
- about 5.2.1
- policy management
- altering policies E.6.2
- creating policies E.6.3
- deleting policies E.6.5
- disabling policies E.6.4
- enabling policies E.6.6
- SA_SYSDBA.ALTER_POLICY procedure E.6.2
- SA_SYSDBA.CREATE_POLICY procedure E.6.3
- SA_SYSDBA.DISABLE_POLICY procedure E.6.4
- SA_SYSDBA.DROP_POLICY policy E.6.5
- SA_SYSDBA.ENABLE_POLICY procedure E.6.6
- SA_SYSDBA package E.6.1
- predicates
- privileges
- COMPACCESS 3.5.2.3
- FULL 3.5.2.2, 3.5.2.4
- Oracle Label Security 1.3, 3.5.1
- PROFILE_ACCESS 3.5.2.4
- program units 3.5.6
- READ 3.5.1, 3.5.2.1, 5.5.1
- row label 3.5.3
- SA_USER_ADMIN.SET_USER_PRIVS procedure E.7.18
- trusted stored program units 12.4.5
- WRITEACROSS 3.5.3, 3.5.3.3
- WRITEDOWN 3.5.3, 3.5.6
- WRITEUP 3.5.3, 3.5.3.1
- PROFILE_ACCESS privilege 3.5.2.4
- program units
- finding policy privileges for F.2.8
- propagated D.1
R
- RAC D.1
- READ_CONTROL option
- read access
- reading down 3.4.2
- read label 3.3.2
- READ privilege 3.5.1, 3.5.2.1, 5.5.1
- re-enabling Oracle Label Security A
- referential integrity 11.3.3, 11.4.4, 11.5
- registering Oracle Label Security 4.1.1
- releasability 16.2
- remote users 14.2
- REPADMIN account 14.6.3.1, 14.6.3.2
- replication
- replication administrator 14.6.3.1
- restrictions, Oracle Label Security G
- row labels
- default 3.3.1.2, D.2, 3.3.2, E.5.1, E.5.19, E.8.11
- example 3.2.3
- finding current E.8.9
- in distributed environment 14.3
- inserting 6.5.2
- LABEL_DEFAULT option 6.5.1, 11.1.6.2
- privileges 3.5.3
- restoring E.5.13
- SA_USER_ADMIN.SET_ROW_LABEL procedure E.7.16
- SA_UTL.NUMERIC_ROW_LABEL function E.8.9
- SA_UTL.SET_ROW_LABEL procedure E.8.11
- saving defaults E.5.17
- setting E.5.19, E.8.11
- setting compartments E.7.11
- setting for current database session E.8.11
- setting for user’s initial use E.7.16
- setting groups E.7.13
- setting levels E.7.14
- understanding 3.2.2
- updating 3.5.3
- viewing E.8.9
S
- SA_AUDIT_ADMIN
- procedures, listed E.1.1
- SA_AUDIT_ADMIN.AUDIT_LABEL_ENABLED procedure E.1.4
- SA_AUDIT_ADMIN.AUDIT_LABEL procedure E.1.3
- SA_AUDIT_ADMIN.AUDIT procedure E.1.2
- SA_AUDIT_ADMIN.CREATE_VIEW procedure E.1.5
- SA_AUDIT_ADMIN.DROP_VIEW procedure E.1.6
- SA_AUDIT_ADMIN.NOAUDIT_LABEL procedure E.1.8
- SA_AUDIT_ADMIN.NOAUDIT procedure E.1.7
- SA_AUDIT_ADMIN PL/SQL package
- about E.1.1
- SA_COMPONENTS
- procedures, listed E.2.1
- SA_COMPONENTS.ALTER_COMPARTMENT procedure E.2.2
- SA_COMPONENTS.ALTER_GROUP_PARENT procedure E.2.4
- SA_COMPONENTS.ALTER_GROUP procedure E.2.3
- SA_COMPONENTS.ALTER_LEVEL procedure E.2.5
- SA_COMPONENTS.CREATE_COMPARTMENT procedure E.2.6
- SA_COMPONENTS.CREATE_GROUP procedure E.2.7
- SA_COMPONENTS.CREATE_LEVEL procedure E.2.8
- SA_COMPONENTS.DROP_COMPARTMENT procedure E.2.9
- SA_COMPONENTS.DROP_GROUP procedure E.2.10
- SA_COMPONENTS.DROP_LEVEL procedure E.2.11
- SA_COMPONENTS package E.2.1
- SA_COMPONENTS PL/SQL package
- about E.2.1
- SA_LABEL_ADMIN
- procedures, listed E.3.1
- SA_LABEL_ADMIN.ALTER_LABEL procedure E.3.2
- SA_LABEL_ADMIN.CREATE_LABEL procedure E.3.3
- SA_LABEL_ADMIN.DROP_LABEL procedure E.3.4
- SA_LABEL_ADMIN PL/SQL package
- about E.3.1
- SA_POLICY_ADMIN
- procedures, listed E.4.1
- SA_POLICY_ADMIN.ALTER_SCHEMA_POLICY procedure E.4.2
- SA_POLICY_ADMIN.APPLY_SCHEMA_POLICY procedure E.4.3
- SA_POLICY_ADMIN.APPLY_TABLE_POLICY procedure E.4.4
- SA_POLICY_ADMIN.DISABLE_SCHEMA_POLICY procedure E.4.5
- SA_POLICY_ADMIN.DISABLE_TABLE_POLICY procedure E.4.6
- SA_POLICY_ADMIN.ENABLE_SCHEMA_POLICY procedure E.4.7
- SA_POLICY_ADMIN.ENABLE_TABLE_POLICY procedure E.4.8
- SA_POLICY_ADMIN.POLICY_SUBSCRIBE procedure E.4.9
- SA_POLICY_ADMIN.POLICY_UNSUBSCRIBE procedure E.4.10
- SA_POLICY_ADMIN.REMOVE_SCHEMA_POLICY procedure E.4.11
- SA_POLICY_ADMIN.REMOVE_TABLE_POLICY procedure E.4.12
- SA_POLICY_ADMIN PL/SQL package
- about E.4.1
- SA_SESSION
- procedures and functions, listed E.5.1
- SA_SESSION.COMP_READ function E.5.2
- SA_SESSION.COMP_WRITE function E.5.3
- SA_SESSION.GROUP_READ function E.5.4
- SA_SESSION.GROUP_WRITE function E.5.5
- SA_SESSION.LABEL function E.5.6
- SA_SESSION.MAX_LEVEL function E.5.7
- SA_SESSION.MAX_READ_LABEL function E.5.8
- SA_SESSION.MAX_WRITE_LABEL function E.5.9
- SA_SESSION.MIN_LEVEL function E.5.10
- SA_SESSION.MIN_WRITE_LABEL function E.5.11
- SA_SESSION.PRIVS function E.5.12
- SA_SESSION.RESTORE_DEFAULT_LABELS procedure E.5.13
- SA_SESSION.ROW_LABEL function E.5.14
- SA_SESSION.SA_USER_NAME function E.5.16
- SA_SESSION.SAVE_DEFAULT_LABELS procedure E.5.17
- SA_SESSION.SET_ACCESS_PROFILE procedure E.5.16, E.5.18
- SA_SESSION.SET_LABEL procedure E.5.15
- and SA_SESSION.RESTORE_DEFAULT_LABELS E.5.13
- SA_SESSION.SET_ROW_LABEL procedure E.5.19
- SA_SESSION PL/SQL package
- about E.5.1
- SA_SYSDBA
- procedures, listed E.6.1
- SA_SYSDBA.ALTER_POLICY procedure E.6.2
- SA_SYSDBA.CREATE_POLICY procedure E.6.3
- SA_SYSDBA.DISABLE_POLICY procedure E.6.4
- SA_SYSDBA.DROP_POLICY procedure E.6.5
- SA_SYSDBA.ENABLE_POLICY procedure E.6.6
- SA_SYSDBA PL/SQL package
- about E.6.1
- SA_USER_ADMIN.ADD_COMPARTMENTS procedure E.7.2
- SA_USER_ADMIN.ADD_GROUPS procedure E.7.3
- SA_USER_ADMIN.ALTER_COMPARTMENTS procedure E.7.4
- SA_USER_ADMIN.ALTER_GROUPS procedure E.7.5
- SA_USER_ADMIN.DROP_ALL_COMPARTMENTS procedure E.7.6
- SA_USER_ADMIN.DROP_ALL_GROUPS procedure E.7.7
- SA_USER_ADMIN.DROP_COMPARTMENTS procedure E.7.8
- SA_USER_ADMIN.DROP_GROUPS procedure E.7.9
- SA_USER_ADMIN.DROP_USER_ACCESS procedure E.7.10
- SA_USER_ADMIN.SET_COMPARTMENTS procedure E.7.11
- SA_USER_ADMIN.SET_DEFAULT_LABEL procedure E.7.12
- SA_USER_ADMIN.SET_GROUPS procedure E.7.13
- SA_USER_ADMIN.SET_LEVELS procedure E.7.14
- SA_USER_ADMIN.SET_ROW_LABEL procedure E.7.16
- SA_USER_ADMIN.SET_USER_LABELS procedure E.7.17
- SA_USER_ADMIN.SET_USER_PRIVS procedure E.7.18
- SA_USER_ADMIN package
- SA_USER_ADMIN PL/SQL package
- about E.7.1
- SA_UTL.CHECK_LABEL_CHANGE function E.8.2
- SA_UTL.CHECK_READ function E.8.3
- SA_UTL.CHECK_WRITE function E.8.4
- SA_UTL.DATA_LABEL function E.8.5
- SA_UTL.GREATEST_LBOUND function E.8.6
- SA_UTL.LEAST_UBOUND function E.8.7
- SA_UTL.NUMERIC_LABEL function E.8.8
- SA_UTL.NUMERIC_ROW_LABEL function E.8.9
- SA_UTL.SET_LABEL procedure E.8.10
- SA_UTL.SET_ROW_LABEL procedure E.8.11
- SA_UTL package
- SA_UTL PL/SQL package
- about E.8.1
- schemas
- session labels
- sessions
- compartments readable by user E.5.2
- compartments writeable by user E.5.3
- finding current OLS user E.5.16
- finding row label E.5.14
- finding security attributes for F.2.33
- finding session label number E.8.8
- finding session privileges E.5.12
- SA_SESSION.COMP_READ function E.5.2
- SA_SESSION.COMP_WRITE function E.5.3
- SA_SESSION.GROUP_READ function E.5.4
- SA_SESSION.GROUP_WRITE function E.5.5
- SA_SESSION.LABEL function E.5.6
- SA_SESSION.MAX_LEVEL function E.5.7
- SA_SESSION.MAX_READ_LABEL function E.5.8
- SA_SESSION.MAX_WRITE_LABEL function E.5.9
- SA_SESSION.MIN_LEVEL function E.5.10
- SA_SESSION.MIN_WRITE_LABEL function E.5.11
- SA_SESSION.PRIVS E.5.12
- SA_SESSION.RESTORE_DEFAULT_LABELS procedure E.5.13
- SA_SESSION.ROW_LABEL function E.5.14
- SA_SESSION.SA_USER_NAME function E.5.16
- SA_SESSION.SAVE_DEFAULT_LABELS procedure E.5.17
- SA_SESSION.SET_ACCESS_PROFILE procedure E.5.18
- SA_SESSION.SET_LABEL procedure E.5.15
- SA_SESSION package E.5.1
- SA_USER_ADMIN.SET_COMPARTMENTS procedure E.7.11
- SA_USER_ADMIN.SET_DEFAULT_LABEL procedure E.7.12
- SA_USER_ADMIN.SET_LEVELS procedure E.7.14
- SA_UTL.SET_LABEL procedure E.8.10
- SA_UTL.SET_ROW_LABEL procedure E.8.11
- saving default session label E.5.17
- setting label for E.8.10
- setting OLS privileges for user E.5.18
- setting row label for E.8.11
- SET_ACCESS_PROFILE procedure G
- SET_DEFAULT_LABEL procedure
- SET_GROUPS procedure
- inverse groups 16.8.5
- SET_LABEL procedure
- SET_PROG_PRIVS function E.7.15
- SET_ROW_LABEL procedure 16.7.2.2, 16.7.2.3
- SET_USER_LABELS procedure
- inverse groups 16.8.6
- setting label for database session E.8.10
- shared schema restrictions G
- SQL*Loader 15.3
- STRICTLY_DOMINATED_BY function B.1.3.10
- STRICTLY_DOMINATES function B.1.3.8
- SYS_CONTEXT
- SYS account
- policy enforcement 11.1.10
- SYSDBA privilege 13.2
- system privileges 3.5.4, 3.5.5, 3.5.6
T
U
- unified audit trail 13.4
- UPDATE_CONTROL option 11.1.4, 11.4.2
- updating labeled data 11.4
- USER_SA_SESSION view F.2.33
- user authorizations E.7.8
- adding for compartments E.7.2
- adding for groups E.7.3
- altering for compartments E.7.4
- altering for groups E.7.5
- compartments 3.3.1.2, 5.4.4
- dropping for all compartments E.7.6
- dropping for all groups E.7.7
- dropping for specified groups E.7.9
- groups 3.3.1.3, 5.4.6
- levels 3.3.1.1, 5.4.2
- removing all OLS privileges from user E.7.10
- row labels
- default 3.3.1.3
- SA_USER_ADMIN.SET_USER_PRIVS procedure E.7.18
- understanding 3.3, 5.4.1
- users
- utilities
- SA_UTL package E.8.1
V
- views
- access mediation 3.5.5
- ALL_SA_AUDIT_OPTIONS F.2.1
- ALL_SA_COMPARTMENTS F.2.2
- ALL_SA_GROUPS F.2.4
- ALL_SA_LABELS F.2.3, F.2.5
- ALL_SA_LEVELS F.2.6
- ALL_SA_POLICIES F.2.7
- ALL_SA_PROG_PRIVS F.2.8
- ALL_SA_SCHEMA_POLICIES F.2.9
- ALL_SA_TABLE_POLICIES F.2.10
- ALL_SA_USER_LABELS F.2.12
- ALL_SA_USER_LEVELS F.2.13
- ALL_SA_USER_PRIVS F.2.14
- ALL_SA_USERS F.2.11
- DBA_OLS_STATUS F.2.32
- DBA_SA_AUDIT_OPTIONS F.2.15
- DBA_SA_COMPARTMENTS F.2.16
- DBA_SA_DATA_LABELS F.2.17
- DBA_SA_GROUP_HIERARCHY F.2.19
- DBA_SA_GROUPS F.2.18
- DBA_SA_LABELS F.2.20
- DBA_SA_LEVELS F.2.21
- DBA_SA_POLICIES F.2.22
- DBA_SA_PROG_PRIVS F.2.23
- DBA_SA_SCHEMA_POLICIES 11.1.11, F.2.24
- DBA_SA_TABLE_POLICIES 11.1.11, F.2.25
- DBA_SA_USER_COMPARTMENTS F.2.27
- DBA_SA_USER_GROUPS F.2.28
- DBA_SA_USER_LABELS F.2.29
- DBA_SA_USER_LEVELS F.2.30
- DBA_SA_USER_PRIVS F.2.31
- DBA_SA_USERS F.2.26