secretfull.blogg.se

Removes privileges from access control entries (ACE) in the access control list (ACL) of a network host matching the given ACE Deletes a privilege in an access control list (ACL) Creates an access control list (ACL) with an initial privilege setting Checks if a privilege is granted to or denied from the user in an ACL by specifying the object ID of the access control list Checks if a privilege is granted or denied the user in an access control list (ACL) Assigns an access control list (ACL) to a wallet Assigns an access control list (ACL) to a host computer, domain, or IP subnet, and if specified, the TCP port range. Adds a privilege to grant or deny the network access to the user in an access control list (ACL)Īppends an access control entry (ACE) to the access control list (ACL) of a network host.Īppends access control entries (ACE) of an access control list (ACL) to the ACL of a network hostĪppends an access control entry (ACE) to the access control list (ACL) of a walletĪppends access control entries (ACE) of an access control list (ACL) to the ACL of a wallet Table 101-3 DBMS_NETWORK_ACL_ADMIN Package Subprograms Subprogram

HOST LOWER_PORT UPPER_PORT PRIVILEGE STATUS * 1 HQ_DBA DATABASE USER GRANT NO RESOLVEįor example, for HQ_DBA's own permission to access to SELECT HOST, LOWER_PORT, UPPER_PORT, PRIVILEGE, STATUS * 1 HQ_DBA DATABASE USER GRANT NO CONNECT HOST LOWER_PORT UPPER_PORT ACE_ORDER PRINCIPAL PRINCIPAL_TYPE GRANT_TYPE INVERTED_PRINCIPAL PRIVILEGE START_DATE END_DATEĨ0 80 1 SCOTT DATABASE USER GRANT NO HTTPĨ0 80 2 ADAMS DATABASE USER GRANT NO HTTP GRANT_TYPE, INVERTED_PRINCIPAL, PRIVILEGE,ĭBMS_NETWORK_ACL_UTILITY.CONTAINS_HOST('HOST) PRECEDENCE It can be used in conjunction with the DBA_HOST_ACE view to determine the users and their privilege assignments to access a network host.For example, for access to SELECT HOST, LOWER_PORT, UPPER_PORT, The CONTAINS_HOST in the DBMS_NETWORK_ACL_UTLILITY package determines if a host is contained in a domain. Revoke the use_passwords privilege for wallet file:/example/wallets/hr_wallet from SCOTT.ĭbms_network_acl_admin.remove_wallet_ace(Īce => xs$ace_type(privilege_list => xs$name_list('use_passwords'), Wallet_path => 'file:/example/wallets/hr_wallet',Īce => xs$ace_type(privilege_list => xs$name_list('use_client_certificates', 'use_passwords'), Grant the use_client_certificates and use_passwords privileges for wallet file:/example/wallets/hr_wallet to SCOTT.ĭbms_network_acl_admin.append_wallet_ace( Host => 'ace => xs$ace_type(privilege_list => xs$name_list('resolve'), Revoke the resolve privilege for host from SCOTT. Host => 'ace => xs$ace_type(privilege_list => xs$name_list('connect', 'resolve'),

Grant the connect and resolve privileges for host to SCOTT.