Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Row level security and latch waits

RE: Row level security and latch waits

From: <JApplewhite_at_austin.isd.tenet.edu>
Date: Wed, 20 Aug 2003 13:54:24 -0800
Message-ID: <F001.005CBCFB.20030820135424@fatcity.com>

Raj,

Thanks. A mention of which FM would've saved me some searching, but I found it under "Introduction to Fine-Grained Access Control" / "Automatic Reparse" in the "Oracle9i Application Developer's Guide - Fundamentals".

I'll have to do more investigation, since those paragraphs don't clearly explain (at least, to me) what is meant by "the same predicate". Does that mean that predicates with Context Variables included as bind variables will not be reparsed if their Policy Function was created with Static_Policy=True, and yet different sessions can reuse the parsed SQL with their own Context values? ...or not?

Also, any idea where init parameters such as _dynamic_rls_policies and _app_ctx_vers are fully documented? A search reveals that they're not in any of the 9.2 docs that I've got, except for the brief mention they get in the above-mentioned section of the Developer's Guide.

Jack C. Applewhite
Database Administrator
Austin Independent School District
Austin, Texas
512.414.9715 (wk)
512.935.5929 (pager)
JApplewhite_at_austin.isd.tenet.edu

                                                                                                                              
                      "Jamadagni,                                                                                             
                      Rajendra"                 To:       Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>         
                      <Rajendra.Jamadagn        cc:                                                                           
                      i_at_espn.com>               Subject:  RE: Row level security and latch waits                              
                      Sent by:                                                                                                
                      ml-errors_at_fatcity.                                                                                      
                      com                                                                                                     
                                                                                                                              
                                                                                                                              
                      08/20/2003 04:09                                                                                        
                      PM                                                                                                      
                      Please respond to                                                                                       
                      ORACLE-L                                                                                                
                                                                                                                              
                                                                                                                              



Jack,

This is from TFM ...

<manual>
Starting from 9i, queries against Fine Grained Access enabled objects always execute the policy function to make sure most up to date predicate is used for each policy. For example, in case of the time based policy function, in which queries are only allowed between 8am-5pm, an execute of a cursor that is parsed at noon would result in an execution of the policy function at the execution time to make sure policy function is consulted again for the query.

There are only two exceptions to this rule. One is to specify STATIC_POLICY=TRUE when adding the policy to indicate that the policy function always returns the same predicate. Another one is for users whose security policies do not return different predicate within a database session, the init.ora parameter _dynamic_rls_policies can be set to FALSE to reduce the execution overhead.

</manual>

Raj


Rajendra dot Jamadagni at nospamespn dot com All Views expressed in this email are strictly personal. QOTD: Any clod can have facts, having an opinion is an art !

...

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author:
  INET: JApplewhite_at_austin.isd.tenet.edu

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Wed Aug 20 2003 - 16:54:24 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US