Search Results disable_xds

Overview

SYS.DBMS_XDS is a core Oracle Database-supplied PL/SQL package that implements the Oracle Database Vault and Oracle Label Security-adjacent functionality known broadly as "XDS" (eXtensible Data Security). In the Oracle E-Business Suite 12.1.1 and 12.2.2 environments, this package resides in the SYS schema, holds a status of VALID, and carries an API classification of OTHER within the ETRM repository. Its presence in EBS is structural rather than application-authored: EBS Release 12.1.1 and 12.2.2 run on database releases (11gR2 and 12c/19c respectively) in which DBMS_XDS is a mandatory component of the data dictionary. The package provides the DBA and security administrator with a programmatic interface for enabling, disabling, and dropping Virtual Private Database (VPD) policies that are created implicitly by the Data Security and Oracle Data Redaction feature set. It also governs OLAP-based security policies, the refresh of static ACL (Access Control List) metadata, and trace diagnostics for the XDS subsystem.

Key Procedures and Functions

The ETRM metadata documents eleven callable program units within SYS.DBMS_XDS. Their documented purposes are as follows (parameter lists are intentionally not reproduced here):

• ENABLE_XDS — Activates the XDS policy enforcement for the target object, causing the row-level security predicates to become active.
• DISABLE_XDS — Deactivates enforcement while leaving the policy definition in the data dictionary intact, permitting later re-enablement.
• DROP_XDS — Removes the XDS policy entirely from the object, eliminating the associated predicate and metadata.
• ENABLE_OLAP_POLICY — Enables a security policy that applies to OLAP-dimensioned or analytic views.
• DISABLE_OLAP_POLICY — Disables a previously enabled OLAP security policy.
• DROP_OLAP_POLICY — Permanently removes an OLAP security policy.
• SCHEDULE_STATIC_ACL_REFRESH — Registers a job to rebuild static ACL data at a scheduled interval.
• ALTER_STATIC_ACL_REFRESH — Modifies the attributes of an existing scheduled ACL refresh job.
• PURGE_ACL_REFRESH_HISTORY — Cleans historical records generated by prior ACL refresh executions.
• XDS$REFRESH_STATIC_ACL — The internal worker routine invoked by the scheduler to perform the actual static ACL refresh.
• SET_TRACE_LEVEL — Controls diagnostic tracing for XDS operations, useful during troubleshooting.

Tables Accessed

No application-level tables are documented as being referenced through APPS synonyms. All dictionary activity occurs against SYS-owned repository tables that store policy definitions, static ACL membership, and refresh history. These are internal to the database and are not exposed to the EBS schema. The dependency listing confirms that DBMS_XDS references only the SYS schema and STANDARD, and that it is referenced by PUBLIC and SYS itself — evidence that the package is a self-contained database service rather than an EBS data-model component.

Usage Notes

DBMS_XDS is not invoked by standard EBS Forms, concurrent programs, or the Oracle E-Business Suite application code; the ETRM metadata records zero packages that reference it. It is invoked administratively by a DBA or security administrator using SQL*Plus or a similar tool, typically when deploying or withdrawing XDS policies on database objects that support an EBS installation. In 12.1.1 and 12.2.2 environments the package is generally present by default and requires no EBS-specific configuration. Because its API is undocumented in the publicly available EBS documentation set and is owned by SYS, any direct invocation should be treated as a database-level administrative action subject to Oracle Support guidance and full change-control procedures.