[Home] [Help]
33: -- Step 0
34: -- Delete previous compiled information and get
35: -- default access level from role
36: --
37: DELETE FROM oke_compiled_access_rules
38: WHERE role_id = X_Role_ID;
39:
40: SELECT default_access_level
41: INTO L_def_access_level
47: -- Access Rules by attributes
48: --
49: L_stage := 1;
50:
51: INSERT INTO oke_compiled_access_rules
52: ( role_id
53: , secured_object_name
54: , attribute_code
55: , attribute_group_code
97: -- Access Rules by attribute groups
98: --
99: L_stage := 2;
100:
101: INSERT INTO oke_compiled_access_rules
102: ( role_id
103: , secured_object_name
104: , attribute_code
105: , attribute_group_code
140: AND oa.attribute_code = nvl( oap.parent_attribute_code
141: , oap.attribute_code )
142: AND NOT EXISTS (
143: SELECT null
144: FROM oke_compiled_access_rules
145: WHERE role_id = kar.role_id
146: AND secured_object_name = kar.secured_object_name
147: AND attribute_code = oap.attribute_code
148: )
153: -- Access Rules by object
154: --
155: L_stage := 3;
156:
157: INSERT INTO oke_compiled_access_rules
158: ( role_id
159: , secured_object_name
160: , attribute_code
161: , creation_date
194: AND oa.attribute_code = nvl( oap.parent_attribute_code
195: , oap.attribute_code )
196: AND NOT EXISTS (
197: SELECT null
198: FROM oke_compiled_access_rules
199: WHERE role_id = kar.role_id
200: AND secured_object_name = oap.database_object_name
201: AND attribute_code = oap.attribute_code
202: );
206: -- Default Access Levels
207: --
208: L_stage := 4;
209:
210: INSERT INTO oke_compiled_access_rules
211: ( role_id
212: , secured_object_name
213: , attribute_code
214: , creation_date
245: AND attribute_code IS NULL
246: )
247: AND NOT EXISTS (
248: SELECT null
249: FROM oke_compiled_access_rules
250: WHERE role_id = X_Role_ID
251: AND secured_object_name = oap.database_object_name
252: AND attribute_code = oap.attribute_code
253: );
257: -- User Attribute Access by attribute groups
258: --
259: L_stage := 5;
260:
261: INSERT INTO oke_compiled_access_rules
262: ( role_id
263: , secured_object_name
264: , attribute_group_type
265: , attribute_group_code
290: -- User Attribute Access by object
291: --
292: L_stage := 6;
293:
294: INSERT INTO oke_compiled_access_rules
295: ( role_id
296: , secured_object_name
297: , attribute_group_type
298: , attribute_group_code
321: AND kar.attribute_code IS NULL
322: ANd ag.attribute_group_type = 'USER'
323: AND NOT EXISTS (
324: SELECT null
325: FROM oke_compiled_access_rules
326: WHERE role_id = kar.role_id
327: AND secured_object_name = kar.secured_object_name
328: AND attribute_group_code = ag.attribute_group_code
329: AND attribute_group_type = ag.attribute_group_type
335: -- Default User Attribute Access
336: --
337: L_stage := 7;
338:
339: INSERT INTO oke_compiled_access_rules
340: ( role_id
341: , secured_object_name
342: , attribute_group_type
343: , attribute_group_code
360: FROM oke_attribute_groups_v ag
361: WHERE ag.attribute_group_type = 'USER'
362: AND NOT EXISTS (
363: SELECT null
364: FROM oke_compiled_access_rules
365: WHERE role_id = X_Role_ID
366: AND secured_object_name = 'OKE_K_HEADERS'
367: AND attribute_group_type = 'USER'
368: AND attribute_group_code = ag.attribute_group_code )
380: FROM oke_attribute_groups_v ag
381: WHERE ag.attribute_group_type = 'USER'
382: AND NOT EXISTS (
383: SELECT null
384: FROM oke_compiled_access_rules
385: WHERE role_id = X_Role_ID
386: AND secured_object_name = 'OKE_K_LINES'
387: AND attribute_group_type = 'USER'
388: AND attribute_group_code = ag.attribute_group_code )