Is there a way to create tables that can't update rows

Question

Hi
I have an application where security is very importante. I have tables that con only be inserted and queried, not updated or deleted. Is there a way I can tell Oracle to prohibit update and delete on that table.
Regards,
Néstor Boscán

Answer 1

> Is there a way I can tell Oracle to prohibit update and delete on that table.
Yes. Quite easy in fact. It is called FGAC - Fine Grained Access Control.
You create a FGAC function for those tables. These simply returns 1=2 to be added to an UPDATE or DELETE statement's predicate.
Example:
SQL> -- am able to delete from emp
SQL> delete from emp;
17 rows deleted.
SQL> rollback;
Rollback complete.
SQL>
SQL> -- create policy FGAC function
SQL> create or replace function vpdbPolicy( schema varchar2, object varchar2 ) return varchar2 is
2 begin
3 return( '1=2' );
4 end;
5 /
Function created.
SQL>
SQL> -- create FGAC policy
SQL> begin
2 DBMS_RLS.add_policy(
3 object_schema => USER,
4 function_schema => USER,
5 object_name => 'emp',
6 policy_name => 'PROTECT_EMP',
7 policy_function => 'vpdbPolicy',
8 update_check => FALSE,
9 statement_types => 'UPDATE DELETE'
10 );
11 end;
12 /
PL/SQL procedure successfully completed.
SQL>
SQL> -- no longer able to delete from emp
SQL> delete from emp;
0 rows deleted.
SQL> rollback;
Rollback complete.
SQL>