Granting exemptions from VPD policies
Normally, once a policy is declared on an object it cannot be bypassed regardless of the user's privileges.
However, there are situations when a user has to have access rights on all data from an object that has a policy applied. In this recipe, we will show how to make an exemption from VPD policies.
In this recipe we will exempt the user HR
from all the policies declared within the HR
schema.
How to do it...
- Connect as the user
HR
and issue aSELECT
statement against theVIEW_REG_DATA_VPD
view as follows:SQL> conn HR Enter password: Connected. SQL> select first_name,last_name from view_reg_data_vpd where phone_number='650.507.9833'; no rows selected SQL>
- Here on the view
view_reg_data_vpd
we have the policy ...
Get Oracle 11g Anti-hacker's Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.