Creating and using Oracle Vault command rules

Command rules can be used in Oracle Vault to restrict and protect database objects against DDL and DML statements, by imposing specific rules. Usually command rules are associated with rulesets, a subject covered in the next recipe. This association is made to permit or restrict certain statements following a logical rule at runtime.

Getting ready

In this recipe, we will create a command rule that will control attempts to select the EMP_DETAILS_VIEW by using the PL/SQL interface and a command rule that controls the use of the CREATE VIEW statement by using DVA. We will be using these two command rules again, in the Creating and using Oracle Vault rulesets recipe given later.

How to do it...

This can be done using the PL/SQL interface, as follows:

1. Connect as the Oracle Vault Owner user and create the command rule, which controls the SELECT statements against EMP_DETAILS_VIEW:

   SQL> begin  dbms_macadm.create_command_rule (command=>'SELECT',rule_set_name...