Home » RDBMS Server » Security » issue with fine grain policies
issue with fine grain policies [message #10904] Mon, 23 February 2004 06:15 Go to next message
Bharath Kumar
Messages: 11
Registered: February 2004
Junior Member
Hi ,

We recently upgraded to oracle 9i and all the packages related fine grain was recompiled .

When we are doing exchage partition on a table which as finegrain was failing with the following error . We are doing this exchage partition with schema owner .

ORA-14136 ALTER TABLE EXCHANGE restricted by fine-grained security

Cause: User doing exchange does not have full table access due to VPD policies.

Action: Grant exempt priviliges to this user.

Thanks ,

PBK

 

 
Re: issue with fine grain policies [message #10940 is a reply to message #10904] Wed, 25 February 2004 01:55 Go to previous message
Frank Naude
Messages: 4578
Registered: April 1998
Senior Member
Hi,

See chapter 7 of the "Oracle Label Security Administrator's Guide":

Similarly, database users granted the Oracle9i EXEMPT ACCESS POLICY privilege, either directly or through a database role, are completely exempt from Oracle Label Security enforcement--regardless of the export mode, application or utility used to extract data from the database. This is a very powerful privilege and should be carefully managed."

Thus, the following should work:

SQL> GRANT EXEMPT ACCESS POLICY TO SCOTT;
-- do your worst...
SQL> ALTER TABLE EXCHANGE...
SQL> REVOKE EXEMPT ACCESS POLICY FROM SCOTT;


Best regards.

Frank
Previous Topic: error: ora01931 grant references to a role
Next Topic: Database Account
Goto Forum:
  


Current Time: Tue Mar 19 05:24:08 CDT 2024