Getting error ORA-01732, after implementation of VPD policy

Question

Hi,
I have created a policy to restrcit the number of records affected in auncondtional select & update (not more than 3 at a time). The policy is working fine for the select staement but when I'm trying to update the same table I'm getting "ORA-01372: data manipulation operation not legal on this view".
I'm using Oracle 10g release 2. & I performed following steps:
SQL> connect SYS as SYSDBA
Enter password: ****************
Connected.
SQL> GRANT EXECUTE ON DBMS_SESSION TO smbdev;
Grant succeeded.
SQL> GRANT EXECUTE ON DBMS_RLS TO smbdev;
Grant succeeded.
SQL> GRANT CREATE ANY CONTEXT to smbdev;
Grant succeeded.
SQL> GRANT create trigger to smbdev;
Grant succeeded.
SQL> GRANT ADMINISTER DATABASE TRIGGER to smbdev;
Grant succeeded.
SQL> connect smbdev@SMBS
Enter password: *******
Connected.
SQL> CREATE OR REPLACE CONTEXT rownum_ctx USING rownum_ctx_pkg;
Context created.
SQL> CREATE OR REPLACE PACKAGE rownum_ctx_pkg IS
2 PROCEDURE set_rownum;
3 END;
4 /
Package created.
SQL> CREATE OR REPLACE PACKAGE BODY rownum_ctx_pkg IS
2 PROCEDURE set_rownum
3 AS
4 BEGIN
5 DBMS_SESSION.SET_CONTEXT('rownum_ctx', 'rownum', 4);
6 EXCEPTION
7 WHEN NO_DATA_FOUND THEN NULL;
8 END set_rownum;
9 END;
10 /
Package body created.
SQL> CREATE OR REPLACE TRIGGER set_rownum_ctx_trig AFTER LOGON ON DATABASE
2 BEGIN
3 smbdev.rownum_ctx_pkg.set_rownum;
4 END;
5 /
Trigger created.
SQL> CREATE OR REPLACE FUNCTION get_rownum(
2 schema_p IN VARCHAR2,
3 table_p IN VARCHAR2)
4 RETURN VARCHAR2
5 AS
6 rownum_pred VARCHAR2 (400);
7 BEGIN
8 rownum_pred := 'rownum < SYS_CONTEXT(''rownum_ctx'', ''rownum'')';
9 RETURN rownum_pred;
10 END;
11 /
Function created.
SQL> BEGIN
2 DBMS_RLS.ADD_POLICY (
3 object_schema => 'smbdev',
4 object_name => 'SMB_BOLT_CODE',
5 policy_name => 'rownum_policy',
6 function_schema => 'smbdev',
7 policy_function => 'get_rownum',
8 statement_types => 'select,update’)
9 END;
10 /
PL/SQL procedure successfully completed.
SQL> select * from smbdev.SMB_BOLT_CODES;
CATENTRY_ID SYN_BOLT_CODE
13700 08000026540000
13701 08000026520000
13702 08000026530000
SQL> update smb_bolt_codes set SYN_BOLT_CODE='asd';
update smb_bolt_codes set SYN_BOLT_CODE='asd'
ERROR at line 1:
ORA-01732: data manipulation operation not legal on this view
SQL> select * from tab where tname=’ SMB_BOLT_CODES’;
TNAME TABTYPE CLUSTERID
SMB_BOLT_CODES TABLE
SQL> connect sys@smbs as SYSDBA
Enter password: ***********
Connected.
SQL> select count(*) from smbdev.SMB_BOLT_CODES;
COUNT(*)
101
Please let me know what I'm doing wrong or what I need to change?
Thanks in advance.

Answer 1

Welcome to the forum!
This seems odd: you add a policy to an object named SMB_BOLT_CODE, but you query SMB_BOLT_CODES
SQL> BEGIN
2 DBMS_RLS.ADD_POLICY (
3 object_schema => 'smbdev',
4 object_name => 'SMB_BOLT_CODE',
5 policy_name => 'rownum_policy',
6 function_schema => 'smbdev',
7 policy_function => 'get_rownum',
8 statement_types => 'select,update’)
9 END;
10 /
PL/SQL procedure successfully completed.
SQL> select * from smbdev.SMB_BOLT_CODES; --<------ Notice the extra S here...Edited by: Alex Nuijten on Aug 14, 2009 2:28 PM