ORA-12414: internal LBAC error

From: <fred_at_contractor.net>
Date: 17 Mar 2006 07:27:35 -0800
Message-ID: <1142609255.706415.31700@z34g2000cwc.googlegroups.com>

Oracle 10gR2 database installed on XP.

I have implimented label security on a development database as proof of concept. The idea is that a normal user will be able to set his access profile during logon to inherit the acess privileges denoted by a OLS policy label.

I have created on ON_LOGON by schema trigger which runs: sa_session.set_access_profile('CMSSEC', USER). This fails with the

error:
14:18:54 LBACSYS_at_CMSDEV > connect ac1000
ERROR:

ORA-00604: error occurred at recursive SQL level 1 ORA-12414: internal LBAC error: Uninitialized session context, please connect again
Error: ¨¨²©¨²P¨n

ORA-06512: at "LBACSYS.LBAC_SESSION", line 78
ORA-06512: at "LBACSYS.SA_SESSION", line 597
ORA-06512: at line 18

The trigger is :
create or replace trigger on_logon after logon on ac1000.schema DECLARE
  CURSOR c_get_me IS
    SELECT ops_code
    FROM cmsdev.cms_users
    WHERE cms_id = USER;
  l_me VARCHAR2(36);
  l_msg VARCHAR2(80);
begin
  dbms_output.disable;
  dbms_output.enable(NULL);

  OPEN c_get_me;
  FETCH c_get_me INTO l_me;

  l_msg := 'Logged on as '|| USER || ' with OLS label of ' || l_me;   insert into sysmessages values (SYSDATE, l_msg);

  sa_session.set_access_profile('CMSSEC', 'AC');

end;
/

The call to sa_session.set_access_profile('CMSSEC', USER) works as expected when the trigger is disabled and the user is connected normally.

Any help greatly appreciated. Received on Fri Mar 17 2006 - 09:27:35 CST