Index

A

access control
- discretionary 3.5.4
- understanding 3
access mediation
- and views 3.5.5
- enforcement options 3.5.7
- introduction 3.1
- label evaluation 3.4
- program units 3.5.6
ADD_GROUPS procedure
- inverse groups 14.8.3
ALL_CONTROL option 10.2.3, 10.2.4, 10.2.8
ALL_SA_AUDIT_OPTIONS view E.2.2
ALL_SA_COMPARTMENTS view E.2.3, E.2.17
ALL_SA_DATA_LABELS view E.2.4, E.2.18
ALL_SA_GROUPS view E.2.5, E.2.19
ALL_SA_LABELS view E.2.6
ALL_SA_LEVELS view E.2.7
ALL_SA_POLICIES view E.2.8
ALL_SA_PROG_PRIVS view E.2.9
ALL_SA_SCHEMA_POLICIES view E.2.10
ALL_SA_TABLE_POLICIES view E.2.11
ALL_SA_USER_LABELS view E.2.13
ALL_SA_USER_LEVELS view E.2.14
ALL_SA_USER_PRIVS view E.2.15
ALL_SA_USERS view E.2.12
ALTER_GROUP_PARENT
- inverse groups 14.8.10
ALTER_GROUPS procedure
- inverse groups 14.8.4
ALTER_POLICY procedure
- inverse groups 14.8.2
ANALYZE command 13.4.1
APPLY_SCHEMA_POLICY procedure
- with inverse groups 14.3.1
APPLY_TABLE_POLICY procedure
- with inverse groups 14.3.1
architecture, Oracle Label Security 1.6
AS SYSDBA clause 13.5.3
AUDIT_LABEL_ENABLED function D.1.2
auditing
- audit trails D.1.3
- creating audit view D.1.3
- disabling D.1.6
- dropping audit view D.1.4
- finding audit options E.2.2
- finding if labels are recorded D.1.2
- Oracle Label Security 15.1
- SA_AUDIT_ADMIN.AUDIT_LABEL_ENABLED function D.1.2
- SA_AUDIT_ADMIN.CREATE_VIEW procedure D.1.3
- SA_AUDIT_ADMIN.DROP_VIEW procedure D.1.4
- SA_AUDIT_ADMIN.NOAUDIT_LABEL procedure D.1.6
- SA_AUDIT_ADMIN package D.1.1
- views D.1.3

B

B-tree indexes 13.4.2

C

CDBs
- Oracle Label Security 1.9
CHAR_TO_LABEL function 6.5.1, 6.7.2, 6.7.6
CHECK_CONTROL option
- and labeling functions 10.4.1
- and label update 10.6.2, 10.6.3
- definition 10.2.4
- with other options 10.2.9
CHECK_WRITE function D.8.4
child rows
- deleting 10.7
- inserting 10.4.3
- updating 10.6.4
Cloud Control login 5.11.1
COMPACCESS privilege 3.5.2.3
- inverse groups 14.3.5, 14.6
compartments
- altering D.2.2
- creating D.2.6
- definition 2.3.3, 5.4.4
- deleting D.2.9
- example 2.3.3, 5.4.4
- finding E.2.28
- finding compartments user can read in session D.5.2
- finding compartments user can write to in session D.5.3
- finding user information E.2.3
- SA_COMPONENTS.ALTER_COMPARTMENT procedure D.2.2
- SA_COMPONENTS.CREATE_COMPARTMENT procedure D.2.6
- SA_COMPONENTS.DROP_COMPARTMENT procedure D.2.9
- SA_USER_ADMIN.ADD_COMPARTMENTS procedure D.7.2
- SA_USER_ADMIN.ALTER_COMPARTMENTS D.7.4
- SA_USER_ADMIN.DROP_COMPARTMENTS procedure D.7.8
- SA_USER_ADMIN.SET_COMPARTMENTS procedure D.7.11
- SA_USER_ADMIN package D.7.1
- setting authorizations 3.3.1.2, 5.5.4
- tutorial on using 8.1
components
- SA_COMPONENT package D.2.1
- SA_USER_ADMIN.DROP_ALL_COMPARTMENTS procedure D.7.6
configuration of Oracle Label security
- finding status E.2.33
CREATE_GROUP procedure
- inverse groups 14.8.9
CREATE_POLICY procedure
- inverse groups 14.8.1
CREATE FUNCTION statement 11.4.1
CREATE PACKAGE BODY statement 11.4.1
CREATE PACKAGE statement 11.4.1
CREATE PROCEDURE statement 11.4.1
CREATE TABLE AS SELECT statement F
creating databases 13.5.1

D

data
- label-based access 2.1
database links 12.2
databases, creating additional 13.5.1
data dictionary tables 2.2, 13.4.1, 13.5.1, E.1
data labels
- checking if label is data label D.8.5
- finding label and tag information E.2.4
- SA_UTL.DATA_LABEL function D.8.5
Data Pump export
- row labels 13.1.2
Data Pump import 13.2
DBA_OLS_STATUS data dictionary view 4.1.2
DBA_OLS_STATUS view E.2.33
DBA_policyname_AUDIT_TRAIL view E.3
DBA_SA_AUDIT_OPTIONS view E.2.16
DBA_SA_COMPARTMENTS view 13.2.2.2, E.2.17
DBA_SA_DATA_LABELS view E.2.18
DBA_SA_GROUP_HIERARCHY view E.2.20
DBA_SA_GROUPS view 13.2.2.2, E.2.19
DBA_SA_LABELS view 13.2.2.2, E.2.21
DBA_SA_LEVELS view 13.2.2.2, E.2.22
DBA_SA_POLICIES view E.2.23
DBA_SA_PROG_PRIVS view E.2.24
DBA_SA_SCHEMA_POLICIES view 10.2.11, E.2.25
DBA_SA_TABLE_POLICIES view 10.2.11, E.2.26
DBA_SA_USER_COMPARTMENTS view E.2.28
DBA_SA_USER_GROUPS view E.2.29
DBA_SA_USER_LABELS view E.2.30
DBA_SA_USER_LEVELS view E.2.31
DBA_SA_USER_PRIVS view E.2.32
DBA_SA_USERS view E.2.27
default row label D.5.19
DELETE_CONTROL option 10.2.4, 10.7
DELETERESTRICT option 10.7
deleting labeled data 10.7
demobld.sql file 1.8
disabling Oracle Label Security A.1, A.1.2
discretionary access control (DAC) 3.5.4
distributed databases
- connecting to 12.2
- multiple policies 3.6.2
- Oracle Label Security configuration 12.1
- remote session label 12.3
dominance
- definition 3.4.2
- functions
  - about B.1.3.1
- greatest lower bound 6.6.4.2
- inverse groups 14.9
- least upper bound 6.6.4.1
- overview B.1.1
DOMINATES function B.1.1
dropping for specified compartments D.7.8
DROP USER CASCADE restriction F
duties
- of security administrators 1.4

E

enabling Oracle Label Security A.1.3
enforcement options
- and UPDATE 10.6.2
- combinations of 10.2.9
- exemptions 10.2.10
- guidelines 10.2.9
- INVERSE_GROUP 14.3.1
- list of 10.2.2
- overview 10.2.1
- viewing 10.2.11
EXEMPT ACCESS POLICY privilege 10.2.10
Export utility
- LBACSYS restriction F
- policy enforcement 10.2.10
- row labels 3.5.2.1, 13.2.2.2
external tables 5.7.1

F

Flashback Data Archive
- Oracle Label Security policies 5.10
FULL privilege 3.5.2.2, 3.5.2.4
function call C.1, C.2

G

granularity
- to data access 3.4.3
groups
- altering D.2.3
- altering parent groups D.2.4
- creating group parent D.2.7
- definition 2.3.4, 5.4.6
- deleting D.2.10
- example 2.3.4, 5.4.6
- finding for entire database E.2.29
- finding hierarchy of parent-child relationships E.2.20
- finding policy groups E.2.5
- hierarchical 2.3.4, 2.5, 5.4.6, E.2.20
- inverse 14.2
- parent 2.3.4, 3.4.1.2, 5.4.6, 14.3.4
- read/write access 3.4.1.2
- SA_COMPONENTS.ALTER_GROUP_PARENT procedure D.2.4
- SA_COMPONENTS.ALTER_GROUP procedure D.2.3
- SA_COMPONENTS.CREATE_GROUP procedure D.2.7
- SA_COMPONENTS.DROP_GROUP D.2.10
- SA_SESSION.GROUP_READ function D.5.4
- SA_SESSION.GROUP_WRITE function D.5.5
- SA_USER_ADMIN.ADD_GROUPS procedure D.7.3
- SA_USER_ADMIN.ALTER_GROUPS procedure D.7.5
- SA_USER_ADMIN.DROP_ALL_GROUPS procedure D.7.7
- SA_USER_ADMIN.DROP_GROUPS procedure D.7.9
- SA_USER_ADMIN.SET_GROUPS procedure D.7.13
- SA_USER_ADMIN package D.7.1
- setting authorizations 3.3.1.3, 5.5.6
- tutorial on using 9.1

H

HIDE 6.2.2, D.6.2, D.6.3
HIDE option
- default D.6.3
- discussion of 10.2.5
- example 6.2.2
- importing hidden column 13.2.2.5
- inserting data 6.7.5
- not exported 13.1.2
- per-table basis 6.5.2.3
- PL/SQL restriction F
- policy label column
  - inserting data when hidden 6.7.5
- schema level 10.2.2

I

impdp
- See: Data Pump import
Import utility
- importing labeled data 13.2.2.1.2, 13.2.2.2
- importing policies 13.1.2
- importing unlabeled data 13.2.2.4
- with Oracle Label Security 13.2.2
indexes 13.4.2
INITIAL_LABEL variable B.3.1
INITIAL_ROW_LABEL variable B.3.1
INSERT_CONTROL option 10.2.4, 10.4.1
inserting labeled data 6.7.1, 10.4
INTO TABLE clause 13.3.2
invalid objects, troubleshooting H.1
INVERSE_GROUP enforcement option
- behavior of procedures 14.8
- implementation 14.3.1
inverse groups
- and label components 14.3.2
- COMPACCESS privilege 14.3.5, 14.6
- computed labels 14.3.3
- dominance 14.9
- implementation of 14.3
- introduction 14.2
- Max Read Groups 14.3.3.2
- Max Write Groups 14.3.3.2
- parent-child unsupported 14.3.4
- read algorithm 14.4
- session labels 14.7
- SET_DEFAULT_LABEL 14.7.1
- SET_LABEL 14.7.2.1
- SET_ROW_LABEL 14.7.1, 14.7.2.1
- user privileges 14.3.5
- write algorithm 14.5

L

LABEL_DEFAULT option
- and labeling functions 10.3.1, 10.3.2
- authorizing compartments 3.3.1.2
- authorizing groups 3.3.1.3
- importing unlabeled data 13.2.2.4
- inserting labeled data 6.7.4
- with enforcement options 10.2.9
- with SA_SESSION.SET_ROW_LABEL D.5.19
LABEL_TO_CHAR function 6.5.2.1, 6.5.2.2, 6.6.3
LABEL_UPDATE option
- and labeling functions 10.2.6.3, 10.3.2
- and privileges 10.2.6.3
- and WRITE_CONTROL 10.2.7.2
- and WRITEUP 3.5.1, 5.6.1
- definition 10.2.4
- evaluation process 10.6.2
- with enforcement options 10.2.9
label-based security 2.1
label components
- defining D.2.1
- in distributed environment 12.4
- industry examples 2.3.5
- interrelation 2.5
label evaluation process
- COMPACCESS read 3.5.2.3
- COMPACCESS write 3.5.2.3
- inverse groups, COMPACCESS 14.6
- LABEL_UPDATE 10.6.2
- read access 3.4.2
- read access, inverse groups 14.4
- write access 3.4.3
- write access, inverse groups 14.5
labeling functions
- ALL_CONTROL and NO_CONTROL 10.2.8
- and CHECK_CONTROL 10.4.1
- and LABEL_DEFAULT 10.2.6.3, 10.3.1
- and LABEL_DEFAULTlLABEL_DEFAULT option
  - and labeling functions 10.2.6.2
- and LABEL_UPDATE 10.2.6, 10.2.6.4
- and LBACSYS 10.3.2
- creating 10.3.3
- example 10.3.1
- how they work 10.3.2
- importing unlabeled data 13.2.2.4
- in force 10.2.6
- inserting data 6.7.4
- introduction 3.5.7
- override manual insert 10.4.2
- specifying 10.3.4
- testing 10.3.2
- UPDATE 10.6.3
- using 10.3.1
- with enforcement options 10.2.9
label policy containers
- creating 5.3.2
labels D.8.5, D.8.9
- administering 2.6
- altering D.3.2
- and performance 3.5.2.1
- checking if a data label D.8.5
- checking if changed D.8.2
- creating D.3.3
- data and user 2.5
- deleting D.3.4
- finding greatest lower bound D.8.6
- finding tags and types of E.2.6
- merging 6.6.5
- non-comparable B.1.2
- relationships between B.1
- restoring default for session D.5.13
- SA_LABEL_ADMIN.ALTER_LABEL procedure D.3.2
- SA_LABEL_ADMIN.CREATE_LABEL procedure D.3.3
- SA_LABEL_ADMIN.DROP_LABEL procedure D.3.4
- SA_LABEL_ADMIN package D.3.1
- SA_SESSION.LABEL function D.5.6
- SA_SESSION.MAX_READ_LABEL function D.5.8
- SA_SESSION.MAX_WRITE_LABEL function D.5.9
- SA_SESSION.MIN_WRITE_LABEL function D.5.11
- SA_SESSION.RESTORE_DEFAULT_LABELS D.5.13
- SA_SESSION.SET_LABEL procedure D.5.15
- SA_SESSION.SET_ROW_LABEL procedure D.5.19
- SA_USER_ADMIN.SET_USER_LABELS procedure D.7.17
- SA_USER_ADMIN package D.7.1
- SA_UTL.CHECK_LABEL_CHANGE function D.8.2
- SA_UTL.GREATEST_LBOUND function D.8.6
- SA_UTL.SET_LABEL procedure D.8.9
- saving default session label D.5.17
- setting row label D.5.19
- syntax 2.4, 5.4.8
- valid 2.4, 5.4.9, 6.3.1
- with inverse groups 14.3.3
label tags
- converting from string 6.5.1
- converting to string 6.5.2.1
- distributed environment 12.4.1
- example 6.3.2
- inserting data 6.7.3
- introduction 2.4, 5.4.9
- manually defined 6.3.2, 6.3.3
- strategy 13.4.3
- using in WHERE clauses 6.6.1
LBAC_LABEL data type 10.3.2
LBAC_TRIGGER
- about 10.1.1
LBAC_TRIGGER schema
- migrating DML triggers to 10.1.2
LBACSYS
- export 13.1.1
- import 13.1.1
- login 5.11.1
LBACSYS schema
- and labeling functions 10.3.2
- creating additional databases 13.5.1
- data dictionary tables 13.4.1
- export restriction F
levels
- about 5.4.2
- altering levels D.2.5
- creating D.2.8
- definition 2.3.2, 5.4.2
- deleting D.2.11
- example 2.3.2, 5.4.2
- finding E.2.7
- SA_COMPONENTS.ALTER_LEVEL procedure D.2.5
- SA_COMPONENTS.CREATE_LEVEL procedure D.2.8
- SA_COMPONENTS.DROP_LEVEL procedure D.2.11
- SA_SESSION.MAX_LEVEL function D.5.7
- SA_SESSION.MIN_LEVEL function D.5.10
- SA_USER_ADMIN.SET_LEVELS procedure D.7.14
- setting authorizations 3.3.1.1, 5.5.2
- tutorial on using 7.1
logging into Oracle Label Security
- from Cloud Control 4.3
- from SQL*Plus 4.4
login
- Cloud Control 5.11.1
- LBACSYS 5.11.1

M

materialized views 12.6.1.1, 12.6.3.2
Max Read Groups 14.3.3.2
Max Write Group 14.3.3.2
MERGE_LABEL function 6.6.5
multitenant container databases
- See: CDBs

N

NO_CONTROL option 10.2.4, 10.2.8
NUMBER data type 6.2.1

O

object privileges
- and Oracle Label Security privileges 3.5.4
- and trusted stored program units 3.5.6, 11.2
OCI_ATTR_APPCTX_LIST B.3.2
OCI_ATTR_APPCTX_SIZE B.3.2
OCIAttrSet B.3.1, B.3.2
OCI interface B.3.1
OCIParamGet B.3.2
OLS_DOMINATED_BY function B.1.3.6
OLS_DOMINATES function B.1.3.2
OLS_GLBD function 6.6.4.2
OLS_GREATEST_LBOUND function 6.6.4.2
- inverse groups 14.8.14
OLS_LABEL_DOMINATES function
- about B.1.3.3
- in Database Vault policies B.1.3.3
- in Data Redaction policies B.1.3.3
OLS_LEAST_UBOUND function 6.6.4.1
- inverse groups 14.8.13
OLS_LUBD function 6.6.4.1
OLS_STRICTLY_DOMINATED_BY function B.1.3.7
OLS_STRICTLY_DOMINATES function B.1.3.5
ORA-6550 errors, troubleshooting H.2
ORA-942 errors, troubleshooting H.2
Oracle Database Vault
- using OLS_LABEL_DOMINATES function with B.1.3.3
Oracle Data Redaction
- using OLS_LABEL_DOMINATES function with B.1.3.3
Oracle Enterprise Manager
- administering labels 2.6
Oracle Label Security
- about 1.1
- benefits 1.2
- checking if registered and enabled 4.1.2
- DBA_OLS_STATUS data dictionary view 4.1.2
- privileges required to use 1.3
- registering 4.1.1
Oracle Label Security adminstrator user
- creating 4.2
Oracle Label Security data dictionary views
- about E.2, E.2.1
- ALL_SA_AUDIT_OPTIONS E.2.2
- ALL_SA_COMPARTMENTS E.2.3, E.2.17
- ALL_SA_DATA_LABELS E.2.4, E.2.18
- ALL_SA_GROUPS E.2.5, E.2.19
- ALL_SA_LABELS E.2.6
- ALL_SA_LEVELS E.2.7, E.2.22
- ALL_SA_POLICIES E.2.8
- ALL_SA_PROG_PRIVS E.2.9
- ALL_SA_SCHEMA_POLICIES E.2.10
- ALL_SA_TABLE_POLICIES E.2.11
- ALL_SA_USER_LABELS E.2.13
- ALL_SA_USER_LEVELS E.2.14
- ALL_SA_USER_PRIVS E.2.15
- ALL_SA_USERS E.2.12
- DBA_OLS_STATUS E.2.33
- DBA_SA_AUDIT_OPTIONS E.2.16
- DBA_SA_GROUP_HIERARCHY E.2.20
- DBA_SA_LABELS E.2.21
- DBA_SA_POLICIES E.2.23
- DBA_SA_PROG_PRIVS E.2.24
- DBA_SA_SCHEMA_POLICIES E.2.25
- DBA_SA_TABLE_POLICIES E.2.26
- DBA_SA_USER_COMPARTMENTS E.2.28
- DBA_SA_USER_GROUPS E.2.29
- DBA_SA_USER_LABELS E.2.30
- DBA_SA_USER_LEVELS E.2.31
- DBA_SA_USER_PRIVS E.2.32
- DBA_SA_USERS E.2.27
- policies
  - finding information about schema policies E.2.10
- USER_SA_SESSION E.2.34
Oracle Label Security policies
- Flashback Data Archive 5.10
ORDER BY clause 6.6.2

P

packages
- Oracle Label Security 1.7.1
- SA_AUDIT_ADMIN D.1.1
- SA_COMPONENTS D.2.1
- SA_LABEL_ADMIN D.3.1
- SA_POLICY_ADMIN D.4.1
- SA_SESSION D.5.1
- SA_SYSDBA D.6.1
- SA_USER_ADMIN D.7.1
- SA_UTL D.8.1
- trusted stored program units 11.1
partitioning 6.3.3, 13.4.4
PDBs
- Oracle Label Security 1.9
performance, Oracle Label Security
- ANALYZE command 13.4
- indexes 13.4.2
- label tag strategy 13.4.3
- partitioning 13.4.4
- READ privilege 3.5.2.1
PL/SQL
- recreating labels for import 13.2.2.2
- SA_UTL package 11.5, D.8.1
- trusted stored program units 11.1
pluggable databases
- See: PDBs
policies
- about creating 5.7.1
- enforcement guidelines 10.2.9
- enforcement options 3.5.7, 6, 10.2.1, 10.2.2, 10.2.9
- finding for current user E.2.8
- finding for entire database E.2.23
- finding information about table policies E.2.11
- finding privileges for program units E.2.9
- multiple 2.2, 6.3.1
- policy_DBA role 5.2
- privileges 3.5.4, D.7.18
- SA_POLICY_ADMIN package D.4.1
policies, schema
- altering D.4.2
- applying D.4.3
- deleting D.4.9
- disabling D.4.5
- enabling D.4.7
- SA_POLICY_ADMIN.ALTER_SCHEMA_POLICY procedure D.4.2
- SA_POLICY_ADMIN.APPLY_SCHEMA_POLICY procedure D.4.3
- SA_POLICY_ADMIN.ENABLE_SCHEMA_POLICY policy D.4.7
- SA_POLICY_ADMIN.REMOVE_SCHEMA_POLICY procedure D.4.9
policies, schema, disabling
- SA_POLICY_ADMIN.DISABLE_SCHEMA_POLICY procedure D.4.5
policies, table
- applying D.4.4
- deleting D.4.10
- disabling D.4.6
- enabling D.4.8
- SA_POLICY_ADMIN.APPLY_TABLE_POLICY procedure D.4.4
- SA_POLICY_ADMIN.DISABLE_TABLE_POLICY procedure D.4.6
- SA_POLICY_ADMIN.ENABLE_TABLE_POLICY procedure D.4.8
- SA_POLICY_ADMIN.REMOVE_TABLE_POLICY procedure D.4.10
policy_DBA role 2.2, 5.2, D.3.1, D.7.18
- about 1.4
- how to use 1.4
- required for Data Pump import operations 13.2.2.1.2
- required for label management D.3.1
- required for Oracle Label Security auditing D.1.1
- required for SA_USER_ADMIN.SET_PROG_PRIVS procedure D.7.15
- required for SA_USER_ADMIN.SET_USER_PRIVS procedure D.7.18
policy label column
- indexing 13.4.2
- introduction 6.2, 6.2.1
- retrieving 6.5.2.2
- retrieving hidden 6.5.2.3
- storing label tag 2.4, 5.4.9
policy label containers
- about 5.3.1
policy management
- altering policies D.6.2
- creating policies D.6.3
- deleting policies D.6.5
- disabling policies D.6.4
- enabling policies D.6.6
- SA_SYSDBA.ALTER_POLICY procedure D.6.2
- SA_SYSDBA.CREATE_POLICY procedure D.6.3
- SA_SYSDBA.DISABLE_POLICY procedure D.6.4
- SA_SYSDBA.DROP_POLICY policy D.6.5
- SA_SYSDBA.ENABLE_POLICY procedure D.6.6
- SA_SYSDBA package D.6.1
predicates
- access mediation 3.5.7
- errors 10.8.1
- label tag performance strategy 13.4.3
- multiple 10.8.2
- used with policy 10.8.1
privileges
- COMPACCESS 3.5.2.3
- FULL 3.5.2.2, 3.5.2.4
- Oracle Label Security 1.3, 3.5.1
- PROFILE_ACCESS 3.5.2.4
- program units 3.5.6
- READ 3.5.1, 3.5.2.1, 5.6.1
- row label 3.5.3
- SA_USER_ADMIN.SET_USER_PRIVS procedure D.7.18
- trusted stored program units 11.4.5
- WRITEACROSS 3.5.3, 3.5.3.3
- WRITEDOWN 3.5.3, 3.5.6
- WRITEUP 3.5.3, 3.5.3.1
PROFILE_ACCESS privilege 3.5.2.4
program units
- finding policy privileges for E.2.9
propagated C.1

R

RAC C.1
READ_CONTROL option
- algorithm 3.4.2
- and CHECK_CONTROL 10.2.6.4
- and child rows 10.4.3
- definition 10.2.4
- referential integrity 10.6.4
- with other options 10.2.9
- with predicates 10.8.1
read access
- algorithm 3.4.2, 3.5.2.2
- introduction 3.4.1.1
reading down 3.4.2
read label 3.3.2
READ privilege 3.5.1, 3.5.2.1, 5.6.1
recompiling Oracle Label Security 4.1.5
re-enabling Oracle Label Security A.1
referential integrity 10.4.3, 10.6.4, 10.7
- inserts of rows into foreign key tables not in referential tables 10.5
registering Oracle Label Security 4.1.1
reinstalling Oracle Label Security A.2.2
releasability 14.2
remote users 12.2
REPADMIN account 12.6.3.1, 12.6.3.2
replication
- materialized views (snapshots) 12.6.1.1, 12.6.3.2, 12.6.4
- with Oracle Label Security 12.6, 12.6.1.2
replication administrator 12.6.3.1
restrictions, Oracle Label Security F
row labels
- default 3.3.1.2, 3.3.2, C.2, D.5.1, D.5.19, D.8.10
- example 3.2.3
- finding current D.8.8
- in distributed environment 12.3
- inserting 6.7.2
- LABEL_DEFAULT option 6.7.1, 10.2.6.2
- privileges 3.5.3
- restoring D.5.13
- SA_USER_ADMIN.SET_ROW_LABEL procedure D.7.16
- SA_UTL.NUMERIC_ROW_LABEL function D.8.8
- SA_UTL.SET_ROW_LABEL procedure D.8.10
- saving defaults D.5.17
- setting D.5.19, D.8.10
- setting compartments D.7.11
- setting for current database session D.8.10
- setting for user’s initial use D.7.16
- setting groups D.7.13
- setting levels D.7.14
- understanding 3.2.2
- updating 3.5.3
- viewing D.8.8

S

SA_AUDIT_ADMIN
- procedures, listed D.1.1
SA_AUDIT_ADMIN.AUDIT_LABEL_ENABLED procedure D.1.2
SA_AUDIT_ADMIN.CREATE_VIEW procedure D.1.3
SA_AUDIT_ADMIN.DROP_VIEW procedure D.1.4
SA_AUDIT_ADMIN.NOAUDIT_LABEL procedure D.1.6
SA_AUDIT_ADMIN.NOAUDIT procedure D.1.5
SA_AUDIT_ADMIN PL/SQL package
- about D.1.1
SA_COMPONENTS
- procedures, listed D.2.1
SA_COMPONENTS.ALTER_COMPARTMENT procedure D.2.2
SA_COMPONENTS.ALTER_GROUP_PARENT procedure D.2.4
SA_COMPONENTS.ALTER_GROUP procedure D.2.3
SA_COMPONENTS.ALTER_LEVEL procedure D.2.5
SA_COMPONENTS.CREATE_COMPARTMENT procedure D.2.6
SA_COMPONENTS.CREATE_GROUP procedure D.2.7
SA_COMPONENTS.CREATE_LEVEL procedure D.2.8
SA_COMPONENTS.DROP_COMPARTMENT procedure D.2.9
SA_COMPONENTS.DROP_GROUP procedure D.2.10
SA_COMPONENTS.DROP_LEVEL procedure D.2.11
SA_COMPONENTS package D.2.1
SA_COMPONENTS PL/SQL package
- about D.2.1
SA_LABEL_ADMIN
- procedures, listed D.3.1
SA_LABEL_ADMIN.ALTER_LABEL procedure D.3.2
SA_LABEL_ADMIN.CREATE_LABEL procedure D.3.3
SA_LABEL_ADMIN.DROP_LABEL procedure D.3.4
SA_LABEL_ADMIN PL/SQL package
- about D.3.1
SA_POLICY_ADMIN
- procedures, listed D.4.1
SA_POLICY_ADMIN.ALTER_SCHEMA_POLICY procedure D.4.2
SA_POLICY_ADMIN.APPLY_SCHEMA_POLICY procedure D.4.3
SA_POLICY_ADMIN.APPLY_TABLE_POLICY procedure D.4.4
SA_POLICY_ADMIN.DISABLE_SCHEMA_POLICY procedure D.4.5
SA_POLICY_ADMIN.DISABLE_TABLE_POLICY procedure D.4.6
SA_POLICY_ADMIN.ENABLE_SCHEMA_POLICY procedure D.4.7
SA_POLICY_ADMIN.ENABLE_TABLE_POLICY procedure D.4.8
SA_POLICY_ADMIN.REMOVE_SCHEMA_POLICY procedure D.4.9
SA_POLICY_ADMIN.REMOVE_TABLE_POLICY procedure D.4.10
SA_POLICY_ADMIN PL/SQL package
- about D.4.1
SA_SESSION
- procedures and functions, listed D.5.1
SA_SESSION.COMP_READ function D.5.2
SA_SESSION.COMP_WRITE function D.5.3
SA_SESSION.GROUP_READ function D.5.4
SA_SESSION.GROUP_WRITE function D.5.5
SA_SESSION.LABEL function D.5.6
SA_SESSION.MAX_LEVEL function D.5.7
SA_SESSION.MAX_READ_LABEL function D.5.8
SA_SESSION.MAX_WRITE_LABEL function D.5.9
SA_SESSION.MIN_LEVEL function D.5.10
SA_SESSION.MIN_WRITE_LABEL function D.5.11
SA_SESSION.PRIVS function D.5.12
SA_SESSION.RESTORE_DEFAULT_LABELS procedure D.5.13
SA_SESSION.ROW_LABEL function D.5.14
SA_SESSION.SA_USER_NAME function D.5.16
SA_SESSION.SAVE_DEFAULT_LABELS procedure D.5.17
SA_SESSION.SET_ACCESS_PROFILE procedure D.5.16, D.5.18
SA_SESSION.SET_LABEL procedure D.5.15
- and SA_SESSION.RESTORE_DEFAULT_LABELS D.5.13
SA_SESSION.SET_ROW_LABEL procedure D.5.19
SA_SESSION PL/SQL package
- about D.5.1
SA_SYSDBA
- procedures, listed D.6.1
SA_SYSDBA.ALTER_POLICY procedure D.6.2
SA_SYSDBA.CREATE_POLICY procedure D.6.3
SA_SYSDBA.DISABLE_POLICY procedure D.6.4
SA_SYSDBA.DROP_POLICY procedure D.6.5
SA_SYSDBA.ENABLE_POLICY procedure D.6.6
SA_SYSDBA PL/SQL package
- about D.6.1
SA_USER_ADMIN.ADD_COMPARTMENTS procedure D.7.2
SA_USER_ADMIN.ADD_GROUPS procedure D.7.3
SA_USER_ADMIN.ALTER_COMPARTMENTS procedure D.7.4
SA_USER_ADMIN.ALTER_GROUPS procedure D.7.5
SA_USER_ADMIN.DROP_ALL_COMPARTMENTS procedure D.7.6
SA_USER_ADMIN.DROP_ALL_GROUPS procedure D.7.7
SA_USER_ADMIN.DROP_COMPARTMENTS procedure D.7.8
SA_USER_ADMIN.DROP_GROUPS procedure D.7.9
SA_USER_ADMIN.DROP_USER_ACCESS procedure D.7.10
SA_USER_ADMIN.SET_COMPARTMENTS procedure D.7.11
SA_USER_ADMIN.SET_DEFAULT_LABEL procedure D.7.12
SA_USER_ADMIN.SET_GROUPS procedure D.7.13
SA_USER_ADMIN.SET_LEVELS procedure D.7.14
SA_USER_ADMIN.SET_ROW_LABEL procedure D.7.16
SA_USER_ADMIN.SET_USER_LABELS procedure D.7.17
SA_USER_ADMIN.SET_USER_PRIVS procedure D.7.18
SA_USER_ADMIN package
- administering stored program units D.7.15
- overview 2.2
- procedures, listed D.7.1
SA_USER_ADMIN PL/SQL package
- about D.7.1
SA_UTL.CHECK_LABEL_CHANGE function D.8.2
SA_UTL.CHECK_READ function D.8.3
SA_UTL.CHECK_WRITE function D.8.4
SA_UTL.DATA_LABEL function D.8.5
SA_UTL.GREATEST_LBOUND function D.8.6
SA_UTL.NUMERIC_LABEL function D.8.7
SA_UTL.NUMERIC_ROW_LABEL function D.8.8
SA_UTL.SET_LABEL procedure D.8.9
SA_UTL.SET_ROW_LABEL procedure D.8.10
SA_UTL package
- dominance functions B.1.3.4
- overview 11.5
- procedures and functions, listed D.8.1
SA_UTL PL/SQL package
- about D.8.1
schemas
- applying policies to 10.2.9, D.6.2
- default policy options D.6.3
- restrictions on shared F
session labels
- changing D.5.15
- computed 3.3.2
- distributed database 12.3
- example 3.2.3
- finding D.8.7
- OCI interface B.3.1
- restoring to default D.5.13
- SA_UTL.SET_LABEL D.8.9
- saving defaults D.5.17
- setting compartments D.7.11
- setting groups D.7.13
- setting user initial D.7.12
- understanding 3.2.1
sessions
- compartments readable by user D.5.2
- compartments writeable by user D.5.3
- finding current OLS user D.5.16
- finding row label D.5.14
- finding security attributes for E.2.34
- finding session label number D.8.7
- finding session privileges D.5.12
- SA_SESSION.COMP_READ function D.5.2
- SA_SESSION.COMP_WRITE function D.5.3
- SA_SESSION.GROUP_READ function D.5.4
- SA_SESSION.GROUP_WRITE function D.5.5
- SA_SESSION.LABEL function D.5.6
- SA_SESSION.MAX_LEVEL function D.5.7
- SA_SESSION.MAX_READ_LABEL function D.5.8
- SA_SESSION.MAX_WRITE_LABEL function D.5.9
- SA_SESSION.MIN_LEVEL function D.5.10
- SA_SESSION.MIN_WRITE_LABEL function D.5.11
- SA_SESSION.PRIVS D.5.12
- SA_SESSION.RESTORE_DEFAULT_LABELS procedure D.5.13
- SA_SESSION.ROW_LABEL function D.5.14
- SA_SESSION.SA_USER_NAME function D.5.16
- SA_SESSION.SAVE_DEFAULT_LABELS procedure D.5.17
- SA_SESSION.SET_ACCESS_PROFILE procedure D.5.18
- SA_SESSION.SET_LABEL procedure D.5.15
- SA_SESSION package D.5.1
- SA_USER_ADMIN.SET_COMPARTMENTS procedure D.7.11
- SA_USER_ADMIN.SET_DEFAULT_LABEL procedure D.7.12
- SA_USER_ADMIN.SET_LEVELS procedure D.7.14
- SA_UTL.SET_LABEL procedure D.8.9
- SA_UTL.SET_ROW_LABEL procedure D.8.10
- saving default session label D.5.17
- setting label for D.8.9
- setting OLS privileges for user D.5.18
- setting row label for D.8.10
SET_ACCESS_PROFILE procedure F
SET_DEFAULT_LABEL procedure
- inverse groups 14.7.1, 14.8.7
SET_GROUPS procedure
- inverse groups 14.8.5
SET_LABEL procedure
- definition D.5.1
- inverse groups 14.7.2.1, 14.8.11
- on remote database 12.3
SET_PROG_PRIVS function D.7.15
SET_ROW_LABEL procedure 14.7.2.2, 14.7.2.3
- inverse groups 14.7.1, 14.7.2.1, 14.8.8, 14.8.12
SET_USER_LABELS procedure
- inverse groups 14.8.6
setting label for database session D.8.9
shared schema restrictions F
SQL*Loader 13.3
SYS_CONTEXT
- and labeling functions 10.3.2
- variables B.3.1
SYS account
- policy enforcement 10.2.10
system privileges 3.5.4, 3.5.5, 3.5.6

T

table rows
- checking if user can read D.8.3
- checking if user can write to D.8.4
- SA_UTL.CHECK_READ function D.8.3
- SA_UTL.CHECK_WRITE function D.8.4
TO_DATA_LABEL function 6.7.6, D.3.3
TO_LBAC_DATA_LABEL function 10.3.2
TO_LBAC_DATA_LABEL function, example of using D.8.9
traditional auditing auditing
- Oracle Label Security 15.2
triggers 10.3.2
triggers, internal
- downgrading to pre-release 23ai 10.1.3
- migrating to LBAC_TRIGGER 10.1.2
- storage in LBAC_TRIGGER 10.1.1
troubleshooting
- invalid objects H.1
- ORA-6550 errors H.2
- ORA-942 errors H.2
trusted program units
- about 5.6.1
trusted stored program units
- creating 11.4.1
- error handling 11.4.5
- example 11.3
- executing 11.4.5
- introduction 11.1
- privileges 3.5.6, 11.4.5
- re-compiling 11.4.3
- replacing 11.4.4
tutorials
- creating Oracle Label Security compartments 8.1
- creating Oracle Label Security groups 9.1
- creating Oracle Label Security levels 7.1

U

unified auditing
- Oracle Label Security 15.1
uninstalling Oracle Label Security A.2.1
UPDATE_CONTROL option 10.2.4, 10.6.2
updating labeled data 10.6
USER_SA_SESSION view E.2.34
user authorizations D.7.8
- adding for compartments D.7.2
- adding for groups D.7.3
- altering for compartments D.7.4
- altering for groups D.7.5
- compartments 3.3.1.2, 5.5.4
- dropping for all compartments D.7.6
- dropping for all groups D.7.7
- dropping for specified groups D.7.9
- groups 3.3.1.3, 5.5.6
- levels 3.3.1.1, 5.5.2
- removing all OLS privileges from user D.7.10
- row labels
  - default 3.3.1.3
- SA_USER_ADMIN.SET_USER_PRIVS procedure D.7.18
- understanding 3.3, 5.5.1
users
- finding label-specific information of E.2.13
- finding level-specific information of E.2.14
- finding policy-specific privileges of E.2.15
- finding privileges of OLS users E.2.12
utilities
- SA_UTL package D.8.1

V

views
- access mediation 3.5.5
- ALL_SA_AUDIT_OPTIONS E.2.2
- ALL_SA_COMPARTMENTS E.2.3
- ALL_SA_GROUPS E.2.5
- ALL_SA_LABELS E.2.4, E.2.6
- ALL_SA_LEVELS E.2.7
- ALL_SA_POLICIES E.2.8
- ALL_SA_PROG_PRIVS E.2.9
- ALL_SA_SCHEMA_POLICIES E.2.10
- ALL_SA_TABLE_POLICIES E.2.11
- ALL_SA_USER_LABELS E.2.13
- ALL_SA_USER_LEVELS E.2.14
- ALL_SA_USER_PRIVS E.2.15
- ALL_SA_USERS E.2.12
- DBA_OLS_STATUS E.2.33
- DBA_SA_AUDIT_OPTIONS E.2.16
- DBA_SA_COMPARTMENTS E.2.17
- DBA_SA_DATA_LABELS E.2.18
- DBA_SA_GROUP_HIERARCHY E.2.20
- DBA_SA_GROUPS E.2.19
- DBA_SA_LABELS E.2.21
- DBA_SA_LEVELS E.2.22
- DBA_SA_POLICIES E.2.23
- DBA_SA_PROG_PRIVS E.2.24
- DBA_SA_SCHEMA_POLICIES 10.2.11, E.2.25
- DBA_SA_TABLE_POLICIES 10.2.11, E.2.26
- DBA_SA_USER_COMPARTMENTS E.2.28
- DBA_SA_USER_GROUPS E.2.29
- DBA_SA_USER_LABELS E.2.30
- DBA_SA_USER_LEVELS E.2.31
- DBA_SA_USER_PRIVS E.2.32
- DBA_SA_USERS E.2.27

W

WRITE_CONTROL option
- algorithm 3.4.3
- definition 10.2.4
- introduction 10.2.7.2
- LABEL_UPDATE 10.2.7.2
- with INSERT, UPDATE, DELETE 10.2.7.2
- with other options 10.2.9
write access
- algorithm 3.4.3, 3.5.2.2
- introduction 3.4.1
WRITEACROSS privilege 3.5.3.3, 10.2.3, 10.2.6.3, 10.6.2
WRITEDOWN privilege 3.5.6, 10.2.3, 10.2.6.3, 10.6.2
write label 3.3.2
WRITEUP privilege 3.5.3, 3.5.3.1