1 PACKAGE dbms_fga AS
2 -- ------------------------------------------------------------------------
3
4 -- CONSTANTS
5 --
6 EXTENDED CONSTANT PLS_INTEGER := 1;
7 DB CONSTANT PLS_INTEGER := 2;
8 DB_EXTENDED CONSTANT PLS_INTEGER := 3; -- (default)
9 XML CONSTANT PLS_INTEGER := 4;
10
11 ALL_COLUMNS CONSTANT BINARY_INTEGER := 1;
12 ANY_COLUMNS CONSTANT BINARY_INTEGER := 0; -- (default)
13
14 -- Support log based replication of FGA (proj 17779)
15 PRAGMA SUPPLEMENTAL_LOG_DATA(default, AUTO_WITH_COMMIT);
16
17 -- add_policy - add a fine grained auditing policy to a table or view
18 --
19 -- INPUT PARAMETERS
20 -- object_schema - schema owning the table/view, current user if NULL
21 -- object_name - name of table or view
22 -- policy_name - name of policy to be added
23 -- audit_column - column to be audited
24 -- audit_condition - predicates for this policy
25 -- handler_schema - schema where the event handler procedure is
26 -- handler_module - name of the event handler
27 -- enable - policy is enabled by DEFAULT
28 -- statement_type - statement type a policy applies to (default SELECT)
29 -- audit_trail - Write sqltext and sqlbind into audit trail as well
30 -- as destination of audit trail (default DB_EXTENDED)
31 -- audit_column_options - option of using 'Any' or 'All' on audit columns
32 -- for the policy (default ANY)
33 -- policy_owner - Owner of FGA policy to be added (default NULL)
34 -- Currently used only by Datapump import : Bug-5921164
35
36 PROCEDURE add_policy(object_schema IN VARCHAR2 := NULL,
37 object_name IN VARCHAR2,
38 policy_name IN VARCHAR2,
39 audit_condition IN VARCHAR2 := NULL,
40 audit_column IN VARCHAR2 := NULL,
41 handler_schema IN VARCHAR2 := NULL,
42 handler_module IN VARCHAR2 := NULL,
43 enable IN BOOLEAN := TRUE,
44 statement_types IN VARCHAR2 := 'SELECT',
45 audit_trail IN PLS_INTEGER := 3,
46 audit_column_opts IN BINARY_INTEGER DEFAULT 0,
47 policy_owner IN VARCHAR2 := NULL);
48
49 -- drop_policy - drop a fine grained auditing policy from a table or view
50 --
51 -- INPUT PARAMETERS
52 -- object_schema - schema owning the table/view, current user if NULL
53 -- object_name - name of table or view
54 -- policy_name - name of policy to be dropped
55
56 PROCEDURE drop_policy(object_schema IN VARCHAR2 := NULL,
57 object_name IN VARCHAR2,
58 policy_name IN VARCHAR2);
59
60 -- enable_policy - enable a security policy for a table or view
61 --
62 -- INPUT PARAMETERS
63 -- object_schema - schema owning the table/view, current user if NULL
64 -- object_name - name of table or view
65 -- policy_name - name of policy to be enabled or disabled
66
67 PROCEDURE enable_policy(object_schema IN VARCHAR2 := NULL,
68 object_name IN VARCHAR2,
69 policy_name IN VARCHAR2,
70 enable IN BOOLEAN := TRUE);
71
72 -- disable_policy - disable a security policy for a table or view
73 --
74 -- INPUT PARAMETERS
75 -- object_schema - schema owning the table/view, current user if NULL
76 -- object_name - name of table or view
77 -- policy_name - name of policy to be enabled or disabled
78
79 PROCEDURE disable_policy(object_schema IN VARCHAR2 := NULL,
80 object_name IN VARCHAR2,
81 policy_name IN VARCHAR2);
82
83 END dbms_fga;