select * from schema_b.emp
where contains(emp.xml_Data,'Hello World',1) > 0

conn / as sysdba

create user test_user1 identified by password;

grant connect, resource to test_user1;

create user test_user2 identified by password;

grant connect, resource to test_user2;

conn test_user1/password

drop table test_tab;  

create table test_tab
( 
 test_sno number(4) not null,
 test_xml xmltype,
 constraint pk_test_tab primary key(test_sno)
);

create index test_xml_ti on test_tab
(
 test_xml
)
indextype is ctxsys.context;

exec dbms_stats.gather_table_stats(NULL,'TEST_TAB');

explain plan for
select * from test_tab t
where contains(t.test_xml,'Bob',1) > 0;

select * from table(dbms_xplan.display);

grant select on test_tab to test_user1;

conn test_user2/password

explain plan for
select * from test_tab t
where contains(t.test_xml,'Bob',1) > 0;

select * from table(dbms_xplan.display);

conn <sec_user_admin>/<sec_user_password>

exec sa_policy_admin.apply_table_policy('TEST_POLICY','TEST_USER1','TEST_TAB','READ_CONTROL,WRITE_CONTROL,LABEL_UPDATE',NULL,NULL);

conn test_user1/password

explain plan for
select * from test_tab t
where contains(t.test_xml,'Bob',1) > 0;

select * from table(dbms_xplan.display);

grant select on test_tab to test_user1;

conn test_user2/password

explain plan for
select * from test_tab t
where contains(t.test_xml,'Bob',1) > 0;

select * from table(dbms_xplan.display);

conn <sec_user_admin>/<sec_user_password>

exec sa_policy_admin.disable_table_policy('TEST_POLICY','TEST_USER1','TEST_TAB');

conn test_user2/password

explain plan for
select * from test_tab t
where contains(t.test_xml,'Bob',1) > 0;

select * from table(dbms_xplan.display);