Table 9-1 summarizes these views. For additional data dictionary views related to Oracle Real Application Security, see Oracle Database Reference.
Table 9-1 Oracle Database Real Application Security Data Dictionary Views
Data Dictionary View | Summary Description |
---|---|
Displays all Real Application Security objects |
|
Displays all application users and application roles |
|
Displays all external application users and application roles |
|
Displays all application users |
|
Displays the application users own account information |
|
Displays password limits for the currently logged on application user |
|
Displays all application roles |
|
Displays all dynamic application roles |
|
Displays all proxy application roles |
|
Displays all Real Application Security application role grants |
|
Lists all Real Application Security application privileges defined in the database. |
|
Lists application privileges contained in security classes owned by the current user |
|
Lists all the Real Application Security implied application privileges defined in the database |
|
Lists all the implied application privileges contained in security classes owned by the current user |
|
Lists all security classes defined in the database |
|
Lists all security classes owned by the current application user |
|
Lists the dependencies between security classes. |
|
Lists the parent security classes for the dependent security classes owned by the current user. |
|
Lists all existing ACLs |
|
lists all ACLs owned by the current user |
|
Lists all the Access Control Entries (ACEs) |
|
Lists all the ACEs from the ACLs owned by the current user |
|
Lists all the data security policies |
|
Lists all the data security policies owned by the current application user |
|
Lists all Real Application Security realms |
|
Lists all Real Application Security realms owned by the current user |
|
Lists all Real Application Security inherited realms |
|
Lists all Real Application Security inherited realms owned by the current user |
|
Lists all Real Application Security ACL parameters |
|
Lists all Real Application Security ACL parameters defined in data security policies owned by the current user |
|
Lists all Real Application Security column constraints |
|
Lists all Real Application Security column constraints owned by the current user |
|
Displays all database objects on which Real Application Security data security policies are enabled |
|
Displays all database objects on which Real Application Security data security policies are modified |
|
Lists all application sessions in the database |
|
Lists all attached application sessions in the database |
|
Lists application roles enabled in application sessions |
|
Displays namespace attributes across application sessions as of last saved state |
|
Describes all Real Application Security namespace templates |
|
Describes all namespace templates together with their attribute details |
|
Displays all static ACL refresh settings for tables that are accessible to the application user. |
|
Displays all static ACL refresh job status history that has been done for tables accessible to the application user. |
|
Displays the ACL refreshjob status for the most recent refreshment job for each table accessible to the application user. |
|
Displays all static ACL refresh settings in the database. |
|
Displays all static ACL refresh job status history that has been done in the database |
|
Displays the ACL refresh job status for the most recent refreshment job for each table in the database |
|
Displays all static ACL refresh settings for tables that are owned by the user. |
|
Displays all static ACL refresh job status history that has been done for tables owned by the user. |
|
Displays the ACL refresh job status for the most recent refreshment job for each table owned by the user. |
|
Displays information about the namespaces and attributes in the current application session. |
|
Displays all enabled application roles in the current application session. |
|
Describes the auditing options that were defined for Real Application Security unified audit policies. See Oracle Database Reference for more information. For information about unified auditing in an Oracle Database Real Application Security environment, see Oracle Database Security Guide. |
|
Provides detailed information about Real Application Security that were audited. See Oracle Database Reference for more information. For information about unified auditing in an Oracle Database Real Application Security environment, see Oracle Database Security Guide. |
|
Lists users for whom Real Application Security unified audit polices are enabled. See Oracle Database Reference for more information. For information about unified auditing in an Oracle Database Real Application Security environment, see Oracle Database Security Guide. |
The DBA_XS_OBJECTS
data dictionary view lists all the existing Real Application Security objects in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the object | |
OWNER |
VARCHAR2(128) |
Owner of the object | |
ID |
NUMBER |
NOT NULL |
Identifier number for the object |
TYPE |
VARCHAR2(18) |
Type of the object. Possible values are:
|
|
STATUS |
VARCHAR2(8) |
Status of the object. Possible values are:
|
The DBA_XS_PRINCIPALS
data dictionary view describes all the existing application users and application roles in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the principal (application user or application role) | |
GUID |
RAW(16) |
Globally unique identifier for the principal | |
TYPE |
VARCHAR2(12) |
Type of the principal. Possible values are:
|
|
EXTERNAL_SOURCE |
VARCHAR2(128) |
External source of the principal | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the principal |
The DBA_XS_EXTERNAL_PRINCIPALS
data dictionary view lists all the external application users and application roles.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the external principal |
The DBA_XS_USERS
data dictionary view describes all existing application users defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the application user | |
GUID |
RAW(16) |
Globally unique identifier for the application user | |
EXTERNAL_SOURCE |
VARCHAR2(128) |
External Source of application users, such as LDAP | |
ROLES_DEFAULT_ENABLED |
VARCHAR2(3) |
Indicates whether all the application roles granted to the application user are enabled by default. Valid values are YES and NO . |
|
STATUS |
VARCHAR2(8) |
Status of the application user. Valid values are ACTIVE and INACTIVE . |
|
ACCOUNT_STATUS |
VARCHAR2(32) |
NOT NULL |
Direct login password policy account status of the user. Indicates whether the account is locked, expired, or unlocked. |
LOCK_DATE |
DATE |
The date the account became locked for the direct login user | |
EXPIRY_DATE |
DATE |
The date the passward became expired for the direct login user | |
PROFILE |
VARCHAR2(128) |
The name of the database profile associated with the application user | |
SCHEMA |
VARCHAR2(128) |
Application user schema | |
START_DATE |
TIMESTAMP(6) WITH TIME ZONE |
Effective start date for the user | |
END_DATE |
TIMESTAMP(6) WITH TIME ZONE |
Effective end date for the user | |
DIRECT_LOGON_USER |
VARCHAR2(3) |
Indicates whether this user has direct logon capability | |
VERIFIER_TYPE |
VARCHAR2(11) |
Type of the verifier assigned to the direct logon user. Only XS_SHA512 and XS_SALTED _SHA1 are allowed.) |
|
DESCRIPTION |
VARCHAR2(4000) |
Description of the application user |
The USER_XS_USERS
data dictionary view describes the current application users own account information.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the current application user | |
STATUS |
VARCHAR2(8) |
Status of the current application user. Valid values are ACTIVE and INACTIVE only. |
|
ACCOUNT_STATUS |
VARCHAR2(32) |
NOT NULL |
Direct login password policy account status of the current user. Valid values are UNLOCK , LOCKED , and EXPIRED . UNLOCK means the current user's account is open. |
LOCK_DATE |
DATE |
The date the account became locked for the direct login session for the current user | |
EXPIRY_DATE |
DATE |
The date the passward became expired or the direct login session for the current user | |
DIRECT_LOGON_USER |
VARCHAR2(3) |
Indicates whether this user has direct logon capability | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the application user |
The USER_XS_PASSWORD_LIMITS
data dictionary view describes the password limits for the currently logged on application user. The DBA can query this view to check the limits for any direct login user.
Column | Datatype | NULL | Description |
---|---|---|---|
RESOURCE_NAME |
VARCHAR2(32) |
NOT NULL |
Name of the password resource |
LIMIT |
VARCHAR2(128) |
The limit placed on this resource |
The DBA_XS_ROLES
data dictionary view describes all existing application roles in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the application role | |
GUID |
RAW(16) |
Globally unique identifier for the application role | |
EXTERNAL_SOURCE |
VARCHAR2(128) |
External Source of the application role, such as LDAP | |
DEFAULT_ENABLED |
VARCHAR(3) |
Whether or not the application role is enabled by default. Values can be YES or NO. | |
START_DATE |
TIMESTAMP(6) WITH TIME ZONE |
Start date from which the application role is valid | |
END_DATE |
TIMESTAMP(6) WITH TIME ZONE |
End date until which the application role is valid | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the application role |
The DBA_XS_DYNAMIC_ROLES
data dictionary view describes all existing dynamic application roles in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the dynamic application role | |
GUID |
RAW(16) |
Globally unique identifier for the dynamic application role | |
DURATION |
NUMBER |
Duration (in minutes) for which the role has been active | |
SYSTEM_DEFINED |
VARCHAR2(3) |
Indicates whether the application role is a system-defined role. Possible values are YES and NO . |
|
SCOPE |
VARCHAR2(7) |
Scope of the application role. Possible values are SESSION and REQUEST . |
|
DESCRIPTION |
VARCHAR2(4000) |
Description of the dynamic application role. |
The DBA_XS_PROXY_ROLES
data dictionary view describes all Real Application Security proxy application role grants.
Column | Datatype | NULL | Description |
---|---|---|---|
PROXY_ USER |
VARCHAR2(128) |
Name of the proxy application user | |
TARGET_USER |
VARCHAR2(128) |
Name of the target application user | |
TARGET_ROLE |
VARCHAR2(128) |
Name of the target application role |
The DBA_XS_ROLE_GRANTS
data dictionary view describes all Real Application Security application role grants.
Column | Datatype | NULL | Description |
---|---|---|---|
GRANTEE |
VARCHAR2(128) |
Name of the principal to which the application role is granted | |
GRANTED_ROLE |
VARCHAR2(128) |
Name of the granted application role | |
GRANTED_ROLE_TYPE |
VARCHAR2(11) |
Name of the granted role | |
START_DATE |
TIMESTAMP(6) WITH TIME ZONE |
Start date from which the application role grant is valid | |
END_DATE |
TIMESTAMP(6) WITH TIME ZONE |
End date until which the application role grant is valid |
The DBA_XS_PRIVILEGES
data dictionary view lists all the Real Application Security application privileges defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the application privilege | |
SECURITY_CLASS |
VARCHAR2(128 ) |
Name of the security class that contains the application privilege | |
SECURITY_CLASS_OWNER |
VARCHAR2(128) |
Owner of the security class that contains the application privilege | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the application privilege. |
The USER_XS_PRIVILEGES
data dictionary view lists the application privileges contained in security classes owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the application privilege | |
SECURITY_CLASS |
VARCHAR2(128 ) |
Name of the security class that contains the application privilege | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the application privilege. |
The DBA_XS_IMPLIED_PRIVILEGES
data dictionary view lists all the Real Application Security implied application privileges defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
PRIVILEGE |
VARCHAR2(128) |
Name of the application privilege containing the implied application privilege | |
IMPLIED_PRIVILEGE |
VARCHAR2(128) |
Name of the implied application privilege | |
SECURITY_CLASS |
VARCHAR2(128 ) |
Name of the security class that contains the application privilege | |
SECURITY_CLASS_OWNER |
VARCHAR2(128) |
Owner of the security class that contains the application privilege |
The USER_XS_IMPLIED_PRIVILEGES
data dictionary view lists the implied application privileges contained in security classes owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
PRIVILEGE |
VARCHAR2(128) |
Name of the application privilege containing the implied application privilege | |
IMPLIED_PRIVILEGE |
VARCHAR2(128) |
Name of the implied application privilege | |
SECURITY_CLASS |
VARCHAR2(128 ) |
Name of the security class that contains the application privilege |
The DBA_XS_SECURITY_CLASSES
data dictionary view lists all Real Application Security security classes defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the security class. | |
OWNER |
VARCHAR2(128) |
Owner of the security class. | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the security class. |
The USER_XS_SECURITY_CLASSES
data dictionary view lists all Real Application Security security classes owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the security class. | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the security class. |
The DBA_XS_SECURITY_CLASS_DEP
data dictionary view lists the dependencies between all security classes defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
SECURITY_CLASS |
VARCHAR2(128 ) |
Name of the security class | |
OWNER |
VARCHAR2(128) |
Owner of the security class | |
PARENT |
VARCHAR2(128) |
Name of the parent security class | |
PARENT_OWNER |
VARCHAR2(128) |
Owner of the parent security class |
The USER_XS_SECURITY_CLASS_DEP
data dictionary view lists the parent security classes for the dependent security classes owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
SECURITY_CLASS |
VARCHAR2(128 ) |
Name of the security class | |
PARENT |
VARCHAR2(128) |
Name of the parent security class | |
PARENT_OWNER |
VARCHAR2(128) |
Owner of the parent security class |
The DBA_XS_ACLS
data dictionary view lists all the existing Real Application Security ACLs defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the ACL. | |
OWNER |
VARCHAR2(128) |
Owner of the ACL. | |
SECURITY_CLASS |
VARCHAR2(128) |
Name of the security class associated with the ACL | |
SECURITY_CLASS_OWNER |
VARCHAR2(128) |
Owner of the security class associated with the ACL. | |
PARENT_ACL |
VARCHAR2(128) |
Name of the parent ACL. | |
PARENT_ACL_OWNER |
VARCHAR2(128) |
Owner of the parent ACL | |
INHERITANCE_TYPE |
VARCHAR2(11) |
Inheritance type of the ACL (EXTENDED or CONSTRAINED ) |
|
DESCRIPTION |
VARCHAR2(4000) |
Description of the ACL |
The USER_XS_ACLS
data dictionary view lists all the ACLs owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the ACL. | |
SECURITY_CLASS |
VARCHAR2(128) |
Name of the security class associated with the ACL | |
SECURITY_CLASS_OWNER |
VARCHAR2(128) |
Owner of the security class associated with the ACL. | |
PARENT_ACL |
VARCHAR2(128) |
Name of the parent ACL. | |
PARENT_ACL_OWNER |
VARCHAR2(128) |
Owner of the parent ACL | |
INHERITANCE_TYPE |
VARCHAR2(11) |
Inheritance type of the ACL (EXTENDED or CONSTRAINED ) |
|
DESCRIPTION |
VARCHAR2(4000) |
Description of the ACL |
The DBA_XS_ACES
data dictionary view lists all the Access Control Entries (ACEs) defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
ACL |
VARCHAR2(128) |
Name of the ACL | |
OWNER |
VARCHAR2(128) |
Owner of the ACL | |
ACE_ORDER |
NUMBER |
NOT NULL |
Order number of the ACE in the ACL |
START_DATE |
TIMESTAMP(6) |
Effective start date of the ACE | |
END_DATE |
TIMESTAMP(6) |
Effective end date of the ACE | |
GRANT_TYPE |
VARCHAR2(5) |
Specifies whether the ACE is a GRANT or DENY |
|
INVERTED_PRINCIPAL |
VARCHAR2(3) |
YES if the principal is inverted, else NO |
|
PRINCIPAL |
VARCHAR2(128) |
Name of the principal to whom the ACE applies | |
PRINCIPAL_TYPE |
VARCHAR2(16) |
Type of the principal, such as application user or application role | |
PRIVILEGE |
VARCHAR2(128) |
Name of the application privilege | |
SECURITY_CLASS |
VARCHAR2(128) |
Name of the security class that scopes the ACL | |
SECURITY_CLASS_OWNER |
VARCHAR2(128) |
Owner of the security class that scopes the ACL |
The USER_XS_ACES
data dictionary view lists all the Access Control Entries (ACEs) from the ACLs owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
ACL |
VARCHAR2(128) |
Name of the ACL | |
ACE_ORDER |
NUMBER |
NOT NULL |
Order number of the ACE in the ACL |
START_DATE |
TIMESTAMP(6) |
Effective start date of the ACE | |
END_DATE |
TIMESTAMP(6) |
Effective end date of the ACE | |
GRANT_TYPE |
VARCHAR2(5) |
Specifies whether the ACE is a GRANT or DENY |
|
INVERTED_PRINCIPAL |
VARCHAR2(3) |
YES if the principal is inverted, else NO |
|
PRINCIPAL |
VARCHAR2(128) |
Name of the principal to whom the ACE applies | |
PRINCIPAL_TYPE |
VARCHAR2(16) |
Type of the principal, such as application user or application role | |
PRIVILEGE |
VARCHAR2(128) |
Name of the application privilege | |
SECURITY_CLASS |
VARCHAR2(128) |
Name of the security class that scopes the ACL | |
SECURITY_CLASS_OWNER |
VARCHAR2(128) |
Owner of the security class that scopes the ACL |
The DBA_XS_POLICIES
data dictionary view lists all the existing Real Application Security data security policies defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the data security policy | |
OWNER |
VARCHAR2(128) |
Owner of the data security policy | |
CREATE_TIME |
TIMESTAMP(6) |
When was the policy created | |
MODIFY_TIME |
TIMESTAMP(6) |
When was the policy last modified | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the data security policy |
The USER_XS_POLICIES
data dictionary view lists all the existing Real Application Security data security policies owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the data security policy | |
CREATE_TIME |
TIMESTAMP(6) |
When was the policy created | |
MODIFY_TIME |
TIMESTAMP(6) |
When was the policy last modified | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the data security policy |
The DBA_XS_REALM_CONSTRAINTS
data dictionary view displays all existing Real Application Security realms in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128 ) |
Name of the data security policy | |
POLICY_OWNER |
VARCHAR2(128) |
Owner of the data security policy | |
REALM_ORDER |
NUMBER |
NOT NULL |
The order of the realm within the data security policy |
REALM_TYPE |
VARCHAR2(13) |
The type of the realm. Valid values are REGULAR , PARAMETERIZED , and INHERITED. |
|
STATIC |
VARCHAR2(7) |
Indicates whether the realm is STATIC or DYNAMIC |
|
REALM |
VARCHAR2(4000) |
The data realm. | |
ACL |
VARCHAR2(128) |
ACL associated with the realm if the realm type is REGULAR |
|
ACL_OWNER |
VARCHAR2(128) |
Owner of the ACL associated with the REGULAR realm |
|
PARENT_OBJECT |
VARCHAR2(128) |
Name of the parent object if the realm type is INHERITED |
|
PARENT_SCHEMA |
VARCHAR2(128) |
Schema of the parent object if the realm type is INHERITED |
The USER_XS_REALM_CONSTRAINTS
data dictionary view displays all existing Real Application Security realms owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128 ) |
Name of the data security policy | |
REALM_ORDER |
NUMBER |
NOT NULL |
The order of the realm within the data security policy |
REALM_TYPE |
VARCHAR2(13) |
The type of the realm. Valid values are REGULAR , PARAMETERIZED , and INHERITED. |
|
STATIC |
VARCHAR2(7) |
Indicates whether the realm is STATIC or DYNAMIC |
|
REALM |
VARCHAR2(4000) |
The data realm. | |
ACL |
VARCHAR2(128) |
ACL associated with the realm if the realm type is REGULAR |
|
ACL_OWNER |
VARCHAR2(128) |
Owner of the ACL associated with the REGULAR realm |
|
PARENT_OBJECT |
VARCHAR2(128) |
Name of the parent object if the realm type is INHERITED |
|
PARENT_SCHEMA |
VARCHAR2(128) |
Schema of the parent object if the realm type is INHERITED |
The DBA_XS_INHERITED_REALMS
data dictionary view displays all the inherited Real Application Security realms in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128 ) |
Name of the data security policy | |
POLICY_OWNER |
VARCHAR2(128) |
Owner of the data security policy | |
REALM_ORDER |
NUMBER |
NOT NULL |
The order of the realm within the data security policy |
PARENT_OBJECT |
VARCHAR2(128) |
Name of the parent object | |
PARENT_SCHEMA |
VARCHAR2(128) |
Schema of the parent object | |
PRIMARY_KEY |
VARCHAR2(128) |
The column name in the master table | |
FOREIGN_KEY |
VARCHAR2(4000) |
The column name or value in the detail table | |
FOREIGN_KEY_TYPE |
VARCHAR2(5) |
Type of the foreign key. Possible values are NAME and VALUE. |
The USER_XS_INHERITED_REALMS
data dictionary view displays all the inherited Real Application Security realms owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128 ) |
Name of the data security policy | |
REALM_ORDER |
NUMBER |
NOT NULL |
The order of the realm within the data security policy |
PARENT_OBJECT |
VARCHAR2(128) |
Name of the parent object | |
PARENT_SCHEMA |
VARCHAR2(128) |
Schema of the parent object | |
PRIMARY_KEY |
VARCHAR2(128) |
The column name in the master table | |
FOREIGN_KEY |
VARCHAR2(4000) |
The column name or value in the detail table | |
FOREIGN_KEY_TYPE |
VARCHAR2(5) |
Type of the foreign key. Possible values are NAME and VALUE. |
The DBA_XS_ACL_PARAMETERS
data dictionary view displays all existing Real Application Security ACL parameters.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128 ) |
Name of the data security policy where the ACL parameter is defined | |
POLICY_OWNER |
VARCHAR2(128) |
Owner of the data security policy where the ACL parameter is defined | |
ACL |
VARCHAR2(128) |
Name of the ACL | |
ACL_OWNER |
VARCHAR2(128) |
Owner of the ACL | |
PARAMETER |
VARCHAR2(128) |
Name of the ACL parameter | |
DATATYPE |
VARCHAR2(9) |
Data type of the ACL parameter | |
VALUE |
VARCHAR2(4000) |
Value of the ACL parameter | |
REALM_ORDER |
NUMBER |
The order of the realm within the data security policy | |
REALM |
VARCHAR2(4000) |
The realm that contains the ACL parameter |
The USER_XS_ACL_PARAMETERS
data dictionary view displays all ACL parameters defined in the data security policies owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128 ) |
Name of the data security policy where the ACL parameter is defined | |
ACL |
VARCHAR2(128) |
Name of the ACL | |
ACL_OWNER |
VARCHAR2(128) |
Owner of the ACL | |
PARAMETER |
VARCHAR2(128) |
Name of the ACL parameter | |
DATATYPE |
VARCHAR2(9) |
Data type of the ACL parameter | |
VALUE |
VARCHAR2(4000) |
Value of the ACL parameter | |
REALM_ORDER |
NUMBER |
The order of the realm within the data security policy | |
REALM |
VARCHAR2(4000) |
The realm that contains the ACL parameter |
The DBA_XS_COLUMN_CONSTRAINTS
data dictionary view lists all Real Application Security column constraints defined in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128) |
NA | Name of the data security policy containing the column constraint |
OWNER |
VARCHAR2(128) |
NA | Owner of the data security policy containing the column constraint |
COLUMN_NAME |
VARCHAR2(128) |
NA | Name of the column that has the column constraint applied to it |
PRIVILEGE |
VARCHAR2(128) |
NA | Name of the application privilege required to access the column |
The USER_XS_COLUMN_CONSTRAINTS
data dictionary view lists all Real Application Security column constraints owned by the current user.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128) |
Name of the data security policy containing the column constraint | |
OWNER |
VARCHAR2(128) |
Owner of the data security policy containing the column constraint | |
COLUMN_NAME |
VARCHAR2(128) |
Name of the column that has the column constraint applied to it | |
PRIVILEGE |
VARCHAR2(128) |
Name of the application privilege required to access the column |
The DBA_XS_APPLIED_POLICIES
data dictionary view displays all database objects on which Real Application Security data security policies are enabled.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA |
VARCHAR2(128 ) |
NOT NULL |
Schema containing the object |
OBJECT |
VARCHAR2(128) |
NOT NULL |
Name of the data security enabled object in the database |
POLICY |
VARCHAR2(128) |
Name of the data security policy associated with the object | |
POLICY_OWNER |
VARCHAR2(128) |
NOT NULL |
Owner of the data security policy associated with the object |
SEL |
VARCHAR2(3 ) |
Policy enabled for SELECT statements |
|
INS |
VARCHAR2(3) |
Policy enabled for INSERT statements |
|
UPD |
VARCHAR2(3) |
Policy enabled for UPDATE statements |
|
DEL |
VARCHAR2(3) |
Policy enabled for DELETE statements |
|
IDX |
VARCHAR2(3) |
Policy enabled for INDEX statements |
|
STATUS |
VARCHAR2(8) |
ENABLED if the data security policy is enabled for the object, else DISABLED |
The DBA_XS_MODIFIED_POLICIES
data dictionary view displays all database objects on which Real Application Security data security policies are modified.
Column | Datatype | NULL | Description |
---|---|---|---|
POLICY |
VARCHAR2(128) |
NOT NULL | Name of the data security policy associated with the object |
OBJECT |
VARCHAR2(128) |
NOT NULL |
Name of the data security modified object in the database |
The DBA_XS_SESSIONS
dynamic data dictionary view displays all the application sessions in the database. Only database administrators can select from this view.
Column | Datatype | NULL | Description |
---|---|---|---|
USER_NAME |
VARCHAR2(128 ) |
NOT NULL |
Application user name of the application session |
SESSIONID |
RAW(16) |
NOT NULL |
Application Session identifier |
PROXY_USER |
VARCHAR2(128) |
Name of the proxy application user | |
COOKIE |
VARCHAR2(1024) |
The server-unique cookie value associated with the session | |
CREATE_TIME |
TIMESTAMP(6) |
NOT NULL |
Creation time for the application session |
AUTH_TIME |
TIMESTAMP(6) |
NOT NULL |
Last time the application user was authenticated. |
ACCESS_TIME |
TIMESTAMP(6) |
NOT NULL |
Last time that the application session was accessed |
INACTIVE_TIMEOUT |
NUMBER(6) |
The amount of time (in minutes) before the application session is considered timed out |
The DBA_XS_ACTIVE_SESSIONS
dynamic data dictionary view displays all attached application sessions in the database. Only database administrators can select from this view.
Column | Datatype | NULL | Description |
---|---|---|---|
USER_NAME |
VARCHAR2(128 ) |
NOT NULL |
Application user name of the application session |
SESSIONID |
RAW(16) |
NOT NULL |
Application Session identifier |
DATABASE_SESSIONID |
NUMBER |
The database session ID to which the application session is associated. | |
PROXY_USER |
VARCHAR2(128) |
Name of the proxy application user | |
COOKIE |
VARCHAR2(1024) |
The server-unique cookie value associated with the session | |
CREATE_TIME |
TIMESTAMP(6) |
NOT NULL |
Creation time for the application session |
AUTH_TIME |
TIMESTAMP(6) |
NOT NULL |
Last time the application user was authenticated. |
ACCESS_TIME |
TIMESTAMP(6) |
NOT NULL |
Last time that the application session was accessed |
INACTIVE_TIMEOUT |
NUMBER(6) |
The amount of time (in minutes) before the application session is considered timed out |
The DBA_XS_SESSION_ROLES
dynamic data dictionary view lists application roles enabled in application sessions.
Column | Datatype | NULL | Description |
---|---|---|---|
SESSIONID |
RAW(16) |
NOT NULL |
Application session ID |
ROLE |
VARCHAR2(128) |
NOT NULL |
Name of the application role |
The DBA_XS_SESSION_NS_ATTRIBUTES
data dictionary view displays namespace attributes across application sessions as of last saved state.
Column | Datatype | NULL | Description |
---|---|---|---|
SESSIONID |
RAW(16) |
NOT NULL |
Session ID of the application session |
ATTRIBUTE |
VARCHAR2(4000) |
Name of the attribute | |
NAMESPACE |
VARCHAR2(128) |
NOT NULL |
Name of the namespace |
VALUE |
VARCHAR2(4000) |
Value of the attribute | |
DEFAULT_VALUE |
VARCHAR2(4000) |
Default value of the attribute | |
FIRSTREAD_EVENT |
VARCHAR2(2) |
Indicates whether the handler function is invoked when the attribute is first read. Possible values are YES and NO . |
|
MODIFY_EVENT |
VARCHAR2(2) |
Indicates whether the handler function is invoked when the attribute is modified. Possible values are YES and NO . |
The DBA_XS_NS_TEMPLATES
data dictionary view describes all Real Application Security namespace templates.
Column | Datatype | NULL | Description |
---|---|---|---|
NAME |
VARCHAR2(128) |
Name of the namespace template | |
HANDLER_SCHEMA |
VARCHAR2(128) |
Schema of the namespace handler function | |
HANDLER_PACKAGE |
VARCHAR2(128) |
Package containing the namespace handler function | |
HANDLER_FUNCTION |
VARCHAR2(128) |
The namespace handler function | |
HANDLER_STATUS |
VARCHAR2(7) |
Indicates whether the namespace handler function is VALID or INVALID . |
|
ACL |
VARCHAR2(128) |
Name of ACL for the namespace template. | |
DESCRIPTION |
VARCHAR2(4000) |
Description of the namespace template. |
The DBA_XS_NS_TEMPLATE_ATTRIBUTES
data dictionary view describes all namespace attributes defined in namespace template documents.
Column | Datatype | NULL | Description |
---|---|---|---|
ATTRIBUTE |
VARCHAR2(4000) |
Name of the attribute defined in the namespace template | |
NAMESPACE |
VARCHAR2(128) |
Name of the namespace instantiated by the namespace template | |
DEFAULT_VALUE |
VARCHAR2(4000) |
Default value of the attribute defined in the namespace template | |
FIRSTREAD_EVENT |
VARCHAR2(3) |
Indicates whether the namespace handler function is invoked when the attribute is first read. Valid values are YES and NO . |
|
MODIFY_EVENT |
VARCHAR2(3) |
Indicates whether the namespace handler function is invoked when the attribute value is modified. Valid values are YES and NO . |
The ALL_XDS_ACL_REFRESH
data dictionary view displays all static ACL refresh settings for tables that are accessible to the application user.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
ACL_MVIEW_NAME |
VARCHAR2(128) |
NOT NULL |
Name of ACL MV for this table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
ACL_STATUS |
VARCHAR2(5) |
STALE or FRESH |
|
USER_SUPPLIED_MV |
VARCHAR2(1) |
Y or N |
|
START_DATE |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job scheduled to run after the timestamp, if scheduled | |
REPEAT_INTERVAL |
VARCHAR2(4000) |
The repeat_interval to run the refreshment job, if scheduled |
|
REFRESH_COUNT |
NUMBER |
Number of times this ACL MV has been refreshed so far | |
COMMENTS |
VARCHAR2(240) |
Comments for the refreshment |
The ALL_XDS_ACL_REFSTAT
data dictionary view displays all static ACL refresh job status history that has been done for tables that are accessible to the application user.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
JOB_START_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job starting time | |
JOB_END_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job ending time | |
ROW_UPDATE_COUNT |
NUMBER |
Number of rows have been updated for static ACL sync | |
STATUS |
NUMBER |
Refreshment job status:
0 means success, otherwise an error number is displayed. |
|
ERROR_MESSAGE |
VARCHAR2(4000) |
The error message for the error, if there is any. |
The ALL_XDS_LATEST_ACL_REFSTAT
data dictionary view displays all latest static ACL refresh job status history that has been done for tables that are accessible to the application user. It has the same schema as ALL_XDS_ACL_REFSTAT
dictionary view, but a subset of its rows.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
JOB_START_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job starting time | |
JOB_END_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job ending time | |
ROW_UPDATE_COUNT |
NUMBER |
Number of rows have been updated for static ACL sync | |
STATUS |
NUMBER |
Refreshment job status:
0 means success, otherwise an error number is displayed. |
|
ERROR_MESSAGE |
VARCHAR2(4000) |
The error message for the error, if there is any. |
The DBA_XDS_ACL_REFRESH
data dictionary view displays all static ACL refresh settings in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
ACL_MVIEW_NAME |
VARCHAR2(128) |
NOT NULL |
Name of ACL MV for this table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
ACL_STATUS |
VARCHAR2(5) |
STALE or FRESH |
|
USER_SUPPLIED_MV |
VARCHAR2(1) |
Y or N |
|
START_DATE |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job scheduled to run after the timestamp, if scheduled | |
REPEAT_INTERVAL |
VARCHAR2(4000) |
The repeat_interval to run the refreshment job, if scheduled. |
|
REFRESH_COUNT |
NUMBER |
Number of refreshment has been done so far | |
COMMENTS |
VARCHAR2(240) |
Comments for the refreshment |
The DBA_XDS_ACL_REFSTAT
data dictionary view displays all static ACL refresh job status history that has been done in the database.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
JOB_START_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job starting time | |
JOB_END_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job ending time | |
ROW_UPDATE_COUNT |
NUMBER |
Number of rows have been updated for static ACL sync | |
STATUS |
NUMBER |
Refreshment job status:
0 means success, otherwise an error number is displayed. |
|
ERROR_MESSAGE |
VARCHAR2(4000) |
The error message for the error, if there is any. |
The DBA_XDS_LATEST_ACL_REFSTAT
data dictionary view displays all latest static ACL refresh job status history that has been done in the database. It has the same schema as DBA_XDS_ACL_REFSTAT
dictionary view, but a subset of its rows.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
JOB_START_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job starting time | |
JOB_END_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job ending time | |
ROW_UPDATE_COUNT |
NUMBER |
Number of rows have been updated for static ACL sync | |
STATUS |
NUMBER |
Refreshment job status:
0 means success, otherwise an error number is displayed. |
|
ERROR_MESSAGE |
VARCHAR2(4000) |
The error message for the error, if there is any. |
The USER_XDS_ACL_REFRESH
data dictionary view displays all static ACL refresh settings for tables that are owned by the user.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
ACL_MVIEW_NAME |
VARCHAR2(128) |
NOT NULL |
Name of ACL MV for this table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
ACL_STATUS |
VARCHAR2(5) |
STALE or FRESH |
|
USER_SUPPLIED_MV |
VARCHAR2(1) |
Y or N |
|
START_DATE |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job scheduled to run after the timestamp, if scheduled | |
REPEAT_INTERVAL |
VARCHAR2(4000) |
The repeat_interval to run the refreshment job, if scheduled. |
|
REFRESH_COUNT |
NUMBER |
Number of refreshment has been done so far | |
COMMENTS |
VARCHAR2(240) |
Comments for the refreshment |
The USER_XDS_ACL_REFSTAT
data dictionary view displays all static ACL refresh job status history that has been done for tables that are owned by the user.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
JOB_START_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job starting time | |
JOB_END_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job ending time | |
ROW_UPDATE_COUNT |
NUMBER |
Number of rows have been updated for static ACL sync | |
STATUS |
NUMBER |
Refreshment job status:
0 means success, otherwise an error number is displayed. |
|
ERROR_MESSAGE |
VARCHAR2(4000) |
The error message for the error, if there is any. |
The USER_XDS_LATEST_ACL_REFSTAT
data dictionary view displays all latest static ACL refresh job status history that has been done for tables that are owned by the user. It has the same schema as USER_XDS_ACL_REFSTAT
dictionary view, but a subset of its rows.
Column | Datatype | NULL | Description |
---|---|---|---|
SCHEMA_NAME |
VARCHAR2(128 ) |
NOT NULL |
Name of schema |
TABLE_NAME |
VARCHAR2(128) |
NOT NULL |
Name of table |
REFRESH_MODE |
VARCHAR2(9) |
ON COMMIT , SCHEDULED , or ON DEMAND |
|
REFRESH_ABILITY |
VARCHAR2(11) |
COMPLETE or INCREMENTAL |
|
JOB_START_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job starting time | |
JOB_END_TIME |
TIMESTAMP(6) WITH TIME ZONE |
The refreshment job ending time | |
ROW_UPDATE_COUNT |
NUMBER |
Number of rows have been updated for static ACL sync | |
STATUS |
NUMBER |
Refreshment job status:
0 means success, otherwise an error number is displayed. |
|
ERROR_MESSAGE |
VARCHAR2(4000) |
The error message for the error, if there is any. |
The V$XS_SESSION_NS_ATTRIBUTES
dynamic data dictionary view displays information about the namespaces and attributes in all application sessions in the database as of the end of the last request. The state of any active request is not reflected in this view. Only database administrators can select from this view.
Column | Datatype | NULL | Description |
---|---|---|---|
NAMESPACE_NAME |
VARCHAR2(4000) |
Name of the namespace | |
WORKSPACE_NAME |
VARCHAR2(129) |
Name of the workspace space for the namespace | |
ATTRIBUTE_NAME |
VARCHAR2(4000) |
Name of the attribute | |
ATTRIBUTE_VALUE |
VARCHAR2(4000) |
Value of the attribute | |
ATTRIBUTE_EVENTS |
VARCHAR2(4000) |
Events associated with this attribute | |
ATTRIBUTE_DEFAULT_VALUE |
VARCHAR2(4000) |
Default value for the attribute | |
ATTRIBUTE_TYPE |
VARCHAR2(4000) | Type of attribute, either TEMPLATE or CUSTOM |
|
CON_ID |
NUMBER |
Container ID |
The V$XS_SESSION_ROLES
static data dictionary view displays all enabled application roles in application session in the current request.
Column | Datatype | NULL | Description |
---|---|---|---|
ROLE_WSPACE |
VARCHAR2(129) |
The workspace of the application role. | |
ROLE_NAME |
VARCHAR2(4000 ) |
Name of enabled application role | |
FLAGS |
NUMBER |
Status flag | |
CON_ID |
NUMBER |
Container ID |