Preventing users from executing specific command on specific object
In this recipe, you'll learn to create command rules. A command rule defines a protected database operation on a specific database object (for example, UPDATE on all tables in HR schema). The evaluation of associated rule set determines if statement will be allowed (executed) or blocked.
How to do it...
Create a command rule by following these steps depicted in Figures 19 and 20.
Figure 19 - Creating a command rule
In the Command field, write UPDATE; in the Applicable Object Owner field, write OE; in the Applicable Object Name field, write ORDERS; and select Disabled for Rule Set (see Figure 20).
Figure 20 - A Command rule to secure the UPDATE operation on OE.Orders
How it works...
Note
Command rules can be understood this way: In order to execute command X on object Y in schema Z, rule set with name A needs to evaluate TRUE.
In our case, it can be understood this way: In order to execute UPDATE on the table ORDERS in schema OE...
