Preventing users from executing specific command on specific object
In this recipe, you'll learn to create command rules. A command rule defines a protected database operation on a specific database object (for example, UPDATE
on all tables in HR
schema). The evaluation of associated rule set determines if statement will be allowed (executed) or blocked.
How to do it...
Create a command rule by following these steps depicted in Figures 19 and 20.
In the Command field, write UPDATE
; in the Applicable Object Owner field, write OE
; in the Applicable Object Name field, write ORDERS
; and select Disabled for Rule Set
Get Oracle Database 12c Security Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.