Label Security API

Greetings
All the on-line documentation for Label Security talks only about the GUI admin tool. Is there a PL/SQL package that would allow me to programmatically manage label security?
I want to develop an Account Creation screen that I can give to my users so that they can assign people to predefined roles with particular configurations of labels, compartments, goups without them having to get their heads aound the concepts.
TIA, APC

Hello,
If you haven't installed or some component failed to install that means you won't be able to use it. You can login on dbconsole to verify what features installed by looking at feature usage. You can also launch installer and verify which of the component were isntalled by going to remove tab or even on feature selection on installation page.
Regards

Similar Messages

Using non-alphabetical symbols in Oracle Label Security API

I decide to use Oracle Label Security Release 9.0.1 , but I have some problems in realization . When I try to use function sa_policy_admin.apply_table_policy with
following parameters:
sa_policy_admin.apply_table_policy(
POLICY_NAME => 'policy1',
SCHEMA_NAME => 'domain1\user1',
TABLE_NAME => 'table1'
I receive messages :
ORA-00604: error occurred at recursive SQL level 1
ORA-00911: invalid character
ORA-00911: invalid character
ORA-06512: at "LBACSYS.LBAC_POLICY_ADMIN", line 251
ORA-06512: at line 2
Tell me please , may be there are any limitations on parameter SCHEMA_NAME in function ,
because this function can't understand symbol "\".
Note 1: It is obligatory to use symbol "\" in schema_name ,
because I have to connect to DB as external user (user of Windows 2000 Server).
Note 2: ORA-00911 invalid character
Cause: Special characters are valid only in certain places. If special characters other than $, _, and # are used in a name and the name is not enclosed in double quotation marks ("), this message will be issued. One exception to this rule is for database names; in this case, double quotes are stripped out and ignored.
Action: Remove the invalid character from the statement or encl[i]Long postings are being truncated to ~1 kB at this time.

Yes I have with 10gr3
It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
It worked flawlessly...not supported though
Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
Tim

Security API failed with error 60008

HI, I have been tryng to wrap some files (or something like that) but when I select the files it comes up with an error box saying "security API failed with error 60008" can anyone help me fix this or tell me what it is?

Launch Disk Utility and run Repair Permissions on the startup volume. Try whatever you were doing again. If there's no change, continue as follows.
Triple-click the line below to select it:
/private/tmp
Right-click or control-click the highlighted line and select
Services ▹ Show Info
from the contextual menu.* An Info dialog should open.
Does the dialog show "You can read and write" in the Sharing & Permissions section?
In the General section, is the box labeled Locked checked?
*If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). Open a TextEdit window and paste into it (command-V). Select the line you just pasted and continue as above.

Label print API

Hi All,
Does EBS have an API to print labels? I'm searching for information on the label printing API and an example of how to call it from a JavaConccurnetProgram. Is there another forum more appropriate for this question? I've done a lot of searching on this issue and haven't found much help, any insights will be really appreciated.
Thanks,
Mike

Pl post details of OS and EBS versions, along with which module you intend to print labels from. See if these MOS Docs help -
Label Printing Strategies for Oracle Warehouse Management System (WMS) (Doc ID 414368.1)
https://supporthtml.oracle.com/ep/faces/secure/km/DocumentDisplay.jspx?id=414368.1&h=Y
11i - Inventory Label Printing Documentation (Doc ID 277357.1)
https://supporthtml.oracle.com/ep/faces/secure/km/DocumentDisplay.jspx?id=277357.1&h=Y
There are also 3rd party solutions available -
http://www.zebra.com/id/zebra/na/en/index/about_zebra/alliances/strategic_alliances/oracle.html
http://www.nicelabel.com/resources/files/doc/literature/fl-NiceLabel_and_Oracle-eng.pdf
HTH
Srini

How to install Oracle Label Security in Oracle Database 10g EE

Hello All
I just want to know how to install Oracle Label Security in Oracle 10g Database EE.
I read in Oracle Enterprise Manager Grid Control Installation and Basic Configuration that Label Security must be installed before installing Enterprise Manager Grid Control.
I have Oracle Database 10g Release 1 (10.1.0.1) on my Windows XP System, and I patch it to 10.1.0.3.
M.
Sorry about my English.

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

Post-upgrade ToDo, PI configuration Wizard: com.sap.security.api.DuplicateKeyException Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!

after PI-Upgrade to NW-PI-731-SP07, executing the PI-configuration wizard:
step 126 of 162
Assign SLD Data Supplier user to Group SAP_SLD_DATA_SUPPLIER (local SLD)
Error:
Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!
Execute Java Service
Library: sap.com/tc~lm~ctc~util~core_ear
Class: com.sap.ctc.util.core.services.UserFacade
Method: void com.sap.ctc.util.core.services.UserFacade.addUserToGroup(java.lang.String, java.lang.String)
Arguments (2)
userName : SLD_DS_EXE
groupName : SAP_SLD_DATA_SUPPLIER
InvokeService- Result: ERROR
Refresh Env. Messages: false
Duration: 1.936 sec
Library Info
Default Trace
Exception Class: com.sap.security.api.DuplicateKeyException
Exception Message: Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!
com.sap.security.api.DuplicateKeyException: Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!
at com.sap.ctc.util.infra.rfc.BaseConfig.dispatchException(BaseConfig.java:230)
at com.sap.ctc.util.core.services.impl.ume.java.GroupJavaImpl.verify(GroupJavaImpl.java:121)
at com.sap.ctc.util.core.services.impl.ume.DualGroupImpl.verify(DualGroupImpl.java:118)
at com.sap.ctc.util.core.services.content.ume.UserService.addToGroup(UserService.java:725)
at com.sap.ctc.util.core.services.UserFacade.addUserToGroup(UserFacade.java:288)
what to do?
============
o.k.
https://service.sap.com/sap/support/notes/1016283
first run the UME consistency check => found some inconsistency => did repair UME
then run again UME consistency check => found no more inconsistency !!
the again - try to run the PI-Upgrade-Wizard => but again error on executing .....

see this sap-notes:
http://service.sap.com/sap/support/notes/1617234
http://service.sap.com/sap/support/notes/1661135
http://service.sap.com/sap/support/notes/1678815
http://service.sap.com/sap/support/notes/1626747

How to use BEA Security API to build ownuser admin

Hello,
I want to build my own interface for a user admin module (create user, get role
names, etc) by using the BEA security API. I have been looking through the Javadocs
but can't find the key to how to start it, meaning what are the basic steps to
begin (e.g. first get connection to server bean, then create some generic bean,
etc etc).
Has anyone doen this?
Thanks - peter

On 13 Feb 2004 04:34:28 -0800, Peter Len <[email protected]> wrote:
>
Hello,
I want to build my own interface for a user admin module (create user,
get role
names, etc) by using the BEA security API. I have been looking through
the Javadocs
but can't find the key to how to start it, meaning what are the basic
steps to
begin (e.g. first get connection to server bean, then create some
generic bean,
etc etc).
Has anyone doen this?
Thanks - peterI'm not sure I understand exactly what you're trying to do. WebLogic
Server has a model where application code runs in the containers and the
containers call into the security framework where authentication and
authorization is handled by plug-in modules. Are you attempting to build
one of those plug-in modules? Are you trying to write an ejb or a
servlet?
PaulF
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

Enabling Oracle Label Security on 9.2.0.7 database

Hi there,
I have installed the option Oracle Label Security and patched it to 9.2.0.7. I have then run the script $ORAHOME\rdbms\admin\catols.sql . Which re-starts the database.
But when I run the below example I get the below error.
SQL> CONNECT lbacsys/lbacsys
Connected.
SQL> EXECUTE SA_SYSDBA.CREATE_POLICY( -
'FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE');
BEGIN SA_SYSDBA.CREATE_POLICY( 'FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE'); END;
ERROR at line 1:
ORA-00439: feature not enabled: Oracle Label Security
ORA-06512: at "LBACSYS.LBAC_SYSDBA", line 107
ORA-06512: at "LBACSYS.SA_SYSDBA", line 43
ORA-06512: at line 1
I have also noticed that in the v$option view shows the
PARAMETER VALUE
Oracle Label Security FALSE
I have compared the number of objects to metalink article 171155.1 How to Install / Deinstall Oracle Label Security and all the objects seem to be in the schema.
Also I check the version and saw below.
SQL> conn dba/
Connected.
SQL> COL comp_name FORMAT A32
SQL> COL version FORMAT A16
SQL> SELECT
2 comp_id
3 ,comp_name
4 ,version
5 FROM dba_registry
6 where comp_id='OLS';
COMP_ID COMP_NAME VERSION
OLS Oracle Label Security 9.2.0.7.0
1 rows selected.
SQL>
Anyone know how I can enable Oracle Label Security is that it works?
TIA
Ed

I still have some old 9.2.0.8 databases running on both HP-UX and AIX and have clients on 10.2g which doesn't manifest any problem .

Advance Replication and Oracle Label Security

Has anyone been able to configure both Advance Replication and Oracle Label Security to work together?

This is currently not supported in Streams. I have an enhancement request in with Oracle for this functionality. This won't be seen in 11g R2 either.
Has anyone done Label Security with Advance Replication?

Label Security Limitations

[10.2.2]
I've inherited a database that has about 500 groups within one policy. I'm told there is a potential for it to continue to grow at a rate of maybe 10 per year.
Are there any limitations on the maximum number of groups, categories, etc for label security?

In
http://download.oracle.com/docs/cd/B19306_01/network.102/b14267/labels.htm#i1006370
on 2.2.4 Groups session, we find:
Groups are optional; a label can contain zero or more groups. Oracle Label Security permits defining up to 10,000 groups.

Can/How does Label Security integrate with Documentum Trusted Content Serv

How easy wouldit be to use Oracle Label Security to manage all information in the Oracle dabase including Documentum metadata so that a single security policy cn be defined..at least for the information stored in the Oracle database.
How does the documentum security tag get mapped to an OLS label?
Customer needs only a high level understanding...
Steve Flournoy

I am not familiar with documentum but you can use OLS for:
Row level security based on labels added to the tables you want to protect. Apply the labels to the documentum metadata tables and you have implemented OLS. The Documentum tags can be mapped to OLS labels in Oracle Policy Manager:
Set up the OLS labels just like the documentum security tags in Oracle Policy Manager .
For even more customization use Application Contexts and Virtual Private Database Policies.

OID-Integrated Label Security with HTMLDB?

Hi,
I've followed the how-to document to integrate Oracle Label Security with Oracle Internet Directory.(http://www.oracle.com/technology/deploy/security/database-security/howtos/ols_oid-how-to.html).
I've successfully created a label security policy for the HR.LOCATIONS table. I would like that same policy to be effective on any query regions in an HTMLDB application.
I created a test application in HTMLDB, and changed the authentication scheme to be LDAP. It uses Oracle Internet Directory to authenticate the users, and this works successfully.
However, when I login with an OID user that has been assigned to use the policy, I get no rows returned.
What is a good way to integrate my label security policy with my htmldb applicaton so that it works within HTMLDB and outside of HTMLDB?
I saw the technote to use VPD, but when I tried this, it caused my label security policy to stop working. I somehow made it conflict...(http://www.oracle.com/technology/pub/notes/technote_htmldb_vpd.html)
I guess I'm just not sure what the VPD function should look like after I've already created a Label Security Policy.
I basically want it to look at the APP_USER and then apply the policy appropriately.
Thanks,
Nora

Scott,
It still worked in SQLPLUS when I typed 'set role none' first.
The way I granted PROFILE_ACCESS was through a label security command:
SQL> exec sa_user_admin.set_user_privs('senspolicy','parse_schema','FULL,PROFILE_ACCESS');
It seems like this is the only way..
It just seems strange that it works in SQLPLUS. I'm trying to figure out what other permissions I need for HTMLDB.
Thanks again,
Nora
SQL*Plus: Release 10.2.0.1.0 - Production on Wed May 16 16:38:20 2007
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter user-name: parse_schema/<password>@testls
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Data Mining options
SQL> set role none;
Role set.
SQL> select count(*) from hr.locations;
COUNT(*)
23
SQL> exec sa_session.set_access_profile('senspolicy','PUB');
PL/SQL procedure successfully completed.
SQL> select count(*) from hr.locations;
COUNT(*)
17
SQL>

[svn:bz-trunk] 19459: Security API change for auth sync sample/ concept to work in WebLogic, WebSphere.

Revision: 19459
Revision: 19459
Author:   [email protected]
Date:     2010-12-17 10:15:23 -0800 (Fri, 17 Dec 2010)
Log Message:
Security API change for auth sync sample/concept to work in WebLogic, WebSphere.
Adding the PrincipalConverter interface
Implement the converting principal in WebLogic and WebSphere login command
Modified Paths:
    blazeds/trunk/modules/opt/src/weblogic/flex/messaging/security/WeblogicLoginCommand.java
    blazeds/trunk/modules/opt/src/websphere/flex/messaging/security/WebSphereLoginCommand.jav a
Added Paths:
    blazeds/trunk/modules/core/src/flex/messaging/security/PrincipalConverter.java

Thanks for the reply dood... i've found the solution after several tries... i had to set the channel from the actionscript instead of depending on the Service-config.xml file like the following.. then it worked..
var cs:ChannelSet = new ChannelSet();
var chnl:Channel = new Channel();
var customChannel:Channel = new AMFChannel("my-amf", "http://localhost:8080/somehting/messagebroker/amf");
                cs.addChannel(customChannel);
consumer = new Consumer();
consumer.channelSet = cs;

Using Content Manager with OLS - Oracle Label Security

There are two entries in this forum with OLS - the last one in 2005.
Has any one successfully deployed UCM with OLS?
Thanks,
Paul

Yes I have with 10gr3
It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
It worked flawlessly...not supported though
Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
Tim

How to install "Oracle Label Security" on "Oracle Developers Day" VM?

Hello,
I downloaded and started the "Oracle Developers Day" pre-built virtual machine using VirtualBox.
I need to install Oracle Label Security in order to make some tests with it. So:
1) Do we have the installation folder of Oracle Enterprise Edition somewhere on the VM?
2) If not, how can I install OLS? Do I have to use shared folder to mount the installation media? How can I mount the installation folder, which I downloaded and stored on the host machine? Could you, please, provide step-by-step example?
Thank you in advance.
Beroetz

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

Label Security API

Similar Messages

Maybe you are looking for