OLS label migration

Hi all,
I am running into what I hope is a problem that I can overcome.
Scenario:
1. There is an Oracle instance with OLS in a lab A.
2. When data is inserted, TO_DATA_LABEL is called to automatically create a label if it does not exist. This is a necessary evil because any permutation of levels, compartments, and groups can be used and pre-generating labels is prohibitive.
3. Daily, the data in the lab A is exported, burnd to disc, and imported into an Oracle instance in lab B.
Problem space:
1. Must take labels from lab A to the instance in lab B.
Where the trouble begins
Generating the statements to carry the labels over is easy. We end up with a bunch of statements like this:
execute sa_label_admin.create_label('My_Policy', 1000000000, 'Sensitive');
This is where the issue begins. There is an error thrown when executing this statement in lab B.
The error:
ORA-12427: invalid input value for label tag parameter
My thoughts
It would appear that the numeric label that was generated in lab A is beyond the threshold of what Oracle allows when explicitly creating a label. All values up to 99999999 work, but those above seem to be reserved by Oracle.
This is going to be an issue in this scenario because unless numeric labels can be created in lab B exactly as they are in lab A, the data loses meaning. Can anyone advise me of a way to achieve what I am trying to do?
Thanks in advance,
Chris

Migration Utility was used for a lot of customers having very complex application for Planning and also for Consolidation.
I know at least 10-15 big customers which used the Migration Tool moving their appset from 4.2 to 7.0.
Of course the number of customer where the Migration utility was used is even bigger taking in consideration the migration done by SAP Partners certified to use Migration Tool.
I hope this will help.
Regards
Sorin Radulescu

Similar Messages

  • OLS Label Security: how users can view own level/compartment/group choices?

    I have an application using OLS (Oracle Label Security) Virtual Database (VDB) for security; to allow users to only view rows to which they have access.
    I'm creating a list of values (LOV) to allow the user to change the level or compartment of a database record to a different value for which they still have access. The views that show these values is DBA_SA_USER_LEVELS (and COMPARTMENTS, GROUPS) but this view is only visible to DBA users, not the regular user. We are considering giving regular users access to this view, or granting SELECT_ALL_TABLES as suggested in an article I read. However, this approach seems to loosen security, not maintain it.
    How can I allow a user to get a list of levels, compartments or groups available to them without loosening the security on the DBA_* views?
    thanks,
    Scott

    Bump

  • Can/How does Label Security integrate with Documentum Trusted Content Serv

    How easy wouldit be to use Oracle Label Security to manage all information in the Oracle dabase including Documentum metadata so that a single security policy cn be defined..at least for the information stored in the Oracle database.
    How does the documentum security tag get mapped to an OLS label?
    Customer needs only a high level understanding...
    Steve Flournoy

    I am not familiar with documentum but you can use OLS for:
    Row level security based on labels added to the tables you want to protect. Apply the labels to the documentum metadata tables and you have implemented OLS. The Documentum tags can be mapped to OLS labels in Oracle Policy Manager:
    Set up the OLS labels just like the documentum security tags in Oracle Policy Manager .
    For even more customization use Application Contexts and Virtual Private Database Policies.

  • Adv Replication AND Label Security

    Has anybody implemented Adv Replication AND Label Security?
    I am looking for any advice and warnings.

    Your replication administrator accounts (REPADMIN,etc) will need to have the OLS READ (or FULL) privilege for the policy on the replicated tables so that the predicate is not added. These users will see and replicate everything, there is no way (in Adv. Rep) to replicate data based on the OLS label (say, to only replicate things that are S instead of TS).
    As long as your replication admins have full privilege (or potentially the system privilege EXEMPT ACCESS POLICY, but this bypasses all policies/vpds and shouldn't be used unless you need to and understand the impacts), everything will work out just fine.
    Likely you are aware but if you intend to have the data protected on the target(s), it will need a copy of the policy and the policy applied to the tables as well. You can use database managed OLS and manage the policy in both (or all) places, or evaluate central management of the policy in OID. As much as the OID method has its advanages, I would stick to managing the policy in the database (and automating distributing the changes to different environments) unless you have another good reason to use OID.

  • Activate OLS in apps

    Hello,
    i need to activate OLS (label security) in EBS environment. (or any other database option in ebs)
    but when i run OUI to add this database options it asks to specify
    path (Enter the full path of the file representing the product(s) you want to install)
    at "Specify File Locations" form.
    Usually its products.jar file. But i cannot find it in staging area of ebs 11.5.10.2.
    For example in single database (9.2) its:
    ...Disk1/stage/products.jar"
    please help ) what file in ebs should i specify ?
    platform: rhel4
    thanx in advance,
    Lennox
    PS: its mandatory to activate OLS through OUI

    The 11i rapid install does not deliver the database staging area. You need to download the database software from either OTN or edelivery.oracle.com for the release of the database that you are using. Follow the OLS with 11i implementation doc to install:
    Enabling Oracle Label Security in Oracle E-Business Suite
    https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=234599.1
    OLS is an add-on option available with the Oracle9i Enterprise Edition* and must be installed in the database. Oracle9i Policy Manager is installed by default with the Oracle9i Enterprise Edition. To install OLS, start the installer, select the custom installation option and then check the box beside the Oracle Label Security. Refer to the database installation guide for more instructions. The initial database administration account for OLS is an account called LBACSYS. This account is automatically locked during the installation and can be unlocked by a database administrator.
    * Additional licenses maybe required to use OLS.

  • Oracle 11.2 new feature - chopt utility

    Hey everybody,
    I'm am in the process of doing an 11g upgrade from an 10.2.0.4 to 11.2.0.3 version. We use Oracle Label Security. At a high-level, this is what I was told to do:
    1) Install the Oracle11g software
    2) Backup current 10g database
    3) Relink 11gR2 to turn off OLS
    4) Reline 10gR2 to turn off OLS
    5) Migrate / upgrade database scripts to convert to 11gR2
    6) Reline 11gR2 to turn OLS back on
    7) Verify
    The question I have is for with 3) & 4), if you disable OLS before the upgrade and then enable it after the upgrade, does anyone know what the impact would be? Would this break what you currently have setup or would you have to create all of your policies again?
    ex>
    chopt disable lbac
    Thank you.

    You might want to check the docs, perhaps ask Ben Prusinski directly, or check in the GG forum at GoldenGate
    The docs are at http://www.oracle.com/technetwork/middleware/goldengate/documentation/index.html
    The views are not documented in MOS either, so possibly not designated for public consumption yet, no matter what various authors have posted.

  • Suggestion required for using row level security

    We have a scenario to provide row level security to some of the transaction tables like HR_EMPLOYEE which has a foreign key column DEPT_ID to HR_DEPARTMENTS table. This table may grow up to about 5 million records. There could be regular SELECT operations on this table and not so frequent UPDATES compared to the SELECT operation.
    We were looking at the following approaches...
    Table :
    HR_EMPLOYEE
         EMPNO
         DEPT_ID
         LAST_NAME
         FIRST_NAME
    1. Enable Oracle Label Security policy on this table and use static predicates.
    In this approach we add the OLS policy column (POLICY_COLUMN) and add predicate to access data.
    e.g. we will be giving access to global data by predicate like
    OR POLICY_COLUMN =CHAR_TO_LABEL('POLICY_NAME','C::DEPT1')
    where C::DEPT is the OLS Label
    2. Using VPD policy. We donot add any column, instead use the existing column DEPT_ID to provide row label security. In this approach the DEPT_ID is to be compared against an additional table and DOMINATES function will be used to verify the permission for the user to access the data.
    e.g. In this approach, the policy function is like
    'DOMINATES(char_to_label(''POLICY_NAME'', SA_SESSION.LABEL(''POLICY_NAME''))
    ,char_to_label(''POLICY_NAME'', POLICY_PKG.GET_LABEL_FROM_DEPTID(DEPT_ID))) = 1'
    The GET_LABEL_FROM_DEPTID function returns the OLS label for the corresponding department. This is compared with the user's session label and appropriate rows are given access.
    Can someone suggest on which of the above approaches is more performance effective considering the number of records and the additional OLS column added to the table.

    Hi there,
    would you be able to describe as detailed as possible what you want to achieve? From my first glimpse at your code, it seems as if you are using both OLS and VPD in a rather extraordinary way.
    Best, Peter

  • FTETextField Error

    Am using Flash Builder 4 and Flex 4,0 SDK
    Can anybody help me on this error?
    ArgumentError: Error #2004: One of the parameters is invalid.
    at flash.text.engine::ElementFormat/set fontSize()
    at mx.core::FTETextField/createElementFormat()[E:\dev\4.x\frameworks\projects\spark\src\mx\c ore\FTETextField.as:2704]
    at mx.core::FTETextField/validateNow()[E:\dev\4.x\frameworks\projects\spark\src\mx\core\FTET extField.as:2565]
    at mx.core::FTETextField/setTextFormat()[E:\dev\4.x\frameworks\projects\spark\src\mx\core\FT ETextField.as:2439]
    at mx.core::UIFTETextField/validateNow()[E:\dev\4.x\frameworks\projects\spark\src\mx\core\UI FTETextField.as:2215]
    at mx.core::UIFTETextField/set nestLevel()[E:\dev\4.x\frameworks\projects\spark\src\mx\core\UIFTETextField.as:1496]
    at mx.core::UIComponent/http://www.adobe.com/2006/flex/mx/internal::addingChild()[E:\dev\4.x\frameworks\projects\f ramework\src\mx\core\UIComponent.as:7202]
    at mx.core::UIComponent/addChild()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UICo mponent.as:6910]
    at mx.controls::Label/http://www.adobe.com/2006/flex/mx/internal::createTextField()[E:\dev\4.x\frameworks\projec ts\framework\src\mx\controls\Label.as:1518]
    at mx.controls::Label/createChildren()[E:\dev\4.x\frameworks\projects\framework\src\mx\contr ols\Label.as:1318]
    at mx.core::UIComponent/initialize()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:7349]
    at mx.core::UIComponent/http://www.adobe.com/2006/flex/mx/internal::childAdded()[E:\dev\4.x\frameworks\projects\fr amework\src\mx\core\UIComponent.as:7241]
    at mx.core::UIComponent/addChildAt()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:6947]
    at spark.components::Group/addDisplayObjectToDisplayList()[E:\dev\4.x\frameworks\projects\sp ark\src\spark\components\Group.as:1825]
    at spark.components::Group/http://www.adobe.com/2006/flex/mx/internal::elementAdded()[E:\dev\4.x\frameworks\projects\ spark\src\spark\components\Group.as:1416]
    at spark.components::Group/setMXMLContent()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:512]
    at spark.components::Group/set mxmlContent()[E:\dev\4.x\frameworks\projects\spark\src\spark\components\Group.as:452]
    at spark.components::SkinnableContainer/set mxmlContent()[E:\dev\4.x\frameworks\projects\spark\src\spark\components\SkinnableContaine r.as:604]
    at spark.components::SkinnableContainer/createDeferredContent()[E:\dev\4.x\frameworks\projec ts\spark\src\spark\components\SkinnableContainer.as:986]
    at spark.components::SkinnableContainer/createContentIfNeeded()[E:\dev\4.x\frameworks\projec ts\spark\src\spark\components\SkinnableContainer.as:1014]
    at spark.components::SkinnableContainer/createChildren()[E:\dev\4.x\frameworks\projects\spar k\src\spark\components\SkinnableContainer.as:827]
    at mx.core::UIComponent/initialize()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:7349]
    at mx.core::UIComponent/http://www.adobe.com/2006/flex/mx/internal::childAdded()[E:\dev\4.x\frameworks\projects\fr amework\src\mx\core\UIComponent.as:7241]
    at mx.core::UIComponent/addChildAt()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:6947]
    at spark.components::Group/addDisplayObjectToDisplayList()[E:\dev\4.x\frameworks\projects\sp ark\src\spark\components\Group.as:1825]
    at spark.components::Group/http://www.adobe.com/2006/flex/mx/internal::elementAdded()[E:\dev\4.x\frameworks\projects\ spark\src\spark\components\Group.as:1416]
    at spark.components::Group/setMXMLContent()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:512]
    at spark.components::Group/createChildren()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:734]
    at mx.core::UIComponent/initialize()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:7349]
    at com.zaloni.components::ZaloniDateComponent/initialize()
    at mx.core::UIComponent/http://www.adobe.com/2006/flex/mx/internal::childAdded()[E:\dev\4.x\frameworks\projects\fr amework\src\mx\core\UIComponent.as:7241]
    at mx.core::UIComponent/addChildAt()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:6947]
    at spark.components::Group/addDisplayObjectToDisplayList()[E:\dev\4.x\frameworks\projects\sp ark\src\spark\components\Group.as:1825]
    at spark.components::Group/http://www.adobe.com/2006/flex/mx/internal::elementAdded()[E:\dev\4.x\frameworks\projects\ spark\src\spark\components\Group.as:1416]
    at spark.components::Group/setMXMLContent()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:512]
    at spark.components::Group/createChildren()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:734]
    at mx.core::UIComponent/initialize()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:7349]
    at com.cisco.cisco3.components::DateListItem/initialize()
    at mx.core::UIComponent/http://www.adobe.com/2006/flex/mx/internal::childAdded()[E:\dev\4.x\frameworks\projects\fr amework\src\mx\core\UIComponent.as:7241]
    at mx.core::UIComponent/addChildAt()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:6947]
    at spark.components::Group/addDisplayObjectToDisplayList()[E:\dev\4.x\frameworks\projects\sp ark\src\spark\components\Group.as:1825]
    at spark.components::Group/http://www.adobe.com/2006/flex/mx/internal::elementAdded()[E:\dev\4.x\frameworks\projects\ spark\src\spark\components\Group.as:1416]
    at spark.components::Group/setMXMLContent()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:512]
    at spark.components::Group/createChildren()[E:\dev\4.x\frameworks\projects\spark\src\spark\c omponents\Group.as:734]
    at mx.core::UIComponent/initialize()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UI Component.as:7349]
    at com.cisco.cisco3.renderers::UpcomingDateListRenderer/initialize()
    at mx.core::UIComponent/http://www.adobe.com/2006/flex/mx/internal::childAdded()[E:\dev\4.x\frameworks\projects\fr amework\src\mx\core\UIComponent.as:7241]
    at mx.core::UIComponent/addChild()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\UICo mponent.as:6924]
    at spark.components::DataGroup/initializeTypicalItem()[E:\dev\4.x\frameworks\projects\spark\ src\spark\components\DataGroup.as:288]
    at spark.components::DataGroup/ensureTypicalLayoutElement()[E:\dev\4.x\frameworks\projects\s park\src\spark\components\DataGroup.as:346]
    at spark.components::DataGroup/measure()[E:\dev\4.x\frameworks\projects\spark\src\spark\comp onents\DataGroup.as:1297]
    at mx.core::UIComponent/measureSizes()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\ UIComponent.as:8216]
    at mx.core::UIComponent/validateSize()[E:\dev\4.x\frameworks\projects\framework\src\mx\core\ UIComponent.as:8140]
    at mx.managers::LayoutManager/validateSize()[E:\dev\4.x\frameworks\projects\framework\src\mx \managers\LayoutManager.as:617]
    at mx.managers::LayoutManager/doPhasedInstantiation()[E:\dev\4.x\frameworks\projects\framewo rk\src\mx\managers\LayoutManager.as:733]
    at mx.managers::LayoutManager/doPhasedInstantiationCallback()[E:\dev\4.x\frameworks\projects \framework\src\mx\managers\LayoutManager.as:1072]

    Looks like there is an mx:Label that is trying to use a bad fontSize.  You
    could set a breakpoint on Label.as:createTextField and examine the styles.

  • Missing color labels after migrating to new machine

    Hi everybody,
    I migrated my Lightroom 1.3 yesterday from my old XP notebook to my new Vista notebook by copying my photo folder (including the Lightroom catalog) and installing the same Lightroom version on the new computer. The only difference is that the photo folder is now at c: while before it was at d:.
    When opening Lightroom and the catalog on the new computer on the first glance everything looked fine but then I noticed that all the color labels were gone. Other kind of picture-specific modifications (e. g. development settings) are still there, only the color labels are not (I don't use any other labels, so I am not sure if they would have been affected as well).
    Does anybody have a clue where the labels have gone and how I can get them back? :-)
    Thanks and regards, Robert

    Hi Jim,
    Thanks for the tip, it seems that an inconsistency here was the problem.
    On my old machine I previously used LR in German but when updating to 1.3 I got the English version. So it seems that during upgrading the color labels have stayed in German but when I then installed the English 1.3 on my new notebook it of course installed the labels in English. After changing the names to German I can see the labels again.
    Regards, Robert

  • Using Content Manager with OLS - Oracle Label Security

    There are two entries in this forum with OLS - the last one in 2005.
    Has any one successfully deployed UCM with OLS?
    Thanks,
    Paul

    Yes I have with 10gr3
    It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
    I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
    In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
    It worked flawlessly...not supported though
    Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
    Tim

  • Forms 10g Migration : Labels on Buttons get shrinked.

    Hi All ,
    We have forms from 5/6i converted into forms 10g but observed that on the migrated form Labels on Buttons get shrinked and show up half instead of full.
    First case ,why does this happen ? If so what is the soln. for this.
    One solution might to select each button and change its height , but do you think there is any better way to do it so that it applies to all buttons on the canvas ...
    Thanks,

    Hi ,
    I have used the sam cooridnate system as in forms 5.
    Can you please let me know if this would have any impact to do with the labels size on buttons and other text items.
    I so what value should I change it to.
    I have Real : point as my coirdinate system currently .
    Thanks ,

  • Migrating Local Web Dynpro Projects to the JDI -- labels missing

    Hi all
    I am trying to Migrating Local Web Dynpro Projects to the JDI .But the labels are missing..?.
    The runtime output is coming well. Any suggestions.Do any of you come accross this problem before?.help appreciated and I promise to award full points for best solution
    Thank you
    Regards
    Maruti

    Hi Maruthi,
    Please look at this link,
    Re: How to modify ESS  ii views code which are imported from NWDI to NWDS
    Thanks,
    Raj.

  • Set up Migration Endpoint to single-label Domain/Forest

    I'm in the process of migrating a company from a single-label domain & forest, "domainname," to a new "newdomainname.local" domain & forest. EX2013 single-server installed and working on both domains, including autodiscover. Trust
    is set up and works, cross-domain DNS works from both sides. However...
    I can create a Migration Endpoint on ex2013.domainname that points to ex2013.newdomainname.local, but when I try to add a mailbox created in newdomainname.local, none are displayed.
    I can't create a Migration Endpoint at all on ex2013.newdomainname.local. I get a message that starts, "We couldn't detect your server settings. Please enter them. AutoDiscover failed with a configuration error: The migration service failed to detect
    the migration endpoint using the Autodiscover service."
    I'm prompted for the FQDN of the other Exchange server. When I enter ex2013.domainname, I get, "Error: The connection to the server 'ex2013.domainname' could not be completed."
    Is this expected when one server is on a single-label domain? Is there a way to enable me to use mailbox migration?
    TIA

    Thank you for your post.
    This is a quick note to let you know that we are performing research on this issue
    Niko Cheng
    TechNet Community Support

  • In OLS, how to determine the list of labels a user is allowed to use?

    subject says it all; we have determined how to determine ALL labels available, but how do we filter it via existing lbac tables to show the labels the current user (either direct or via proxy) can use?
    thanks, alan

    Hi there,
    maybe these views do help:
    http://st-doc.us.oracle.com/10/102/network.102/b14267/admpriv.htm#i1012870
    Thanks, Peter

  • Option to export or migrate label data

    Hi, after finding Apple's 10.8 Server app to be unusable I rebuilt my 10.8 mac mini as a samba share with macports. Due to permissions issues encountered by macs connecting via Samba I am now planning to return them to afp (although never again with OSX 10.8 server!)
    However my question is, the OSX Finder labelling is crucial to our mac users, if you label a file as red/green/yellow etc whilst connected via smb, then re-connect via afp the label change doesn't appear & vice versa. Guessing thats because the label info is stored in a separate plist file somewhere? Is there a way to export or synchronize the label settings so that it 'carries over' to macs connecting via afp?
    The server data is stored on a Promise Pegasus 8Tb thunderbolt drive.
    Thanks,

    ok thanks  that makes sense I'll investigate that option, its possible to label files on the smb share still  from the mac client end however the labels don't appear on the server itself, so I'm wondering where those files lables/attribures are stored.

Maybe you are looking for

  • Error While Transporting export Data Source

    Hi Experts, We have a requirement to transport a data source from development to quality system through acceptance box. We need to transport an export data source which contains 40 fields. But when I captured the data source in development system and

  • Sp gl for employee advances

    friends, we want to create a spl gl indicator for employee advances, while creating we need to give one reconciliation and spl  gl account. my question is 1. how to treat employee, we dont have HR module, 2. what could be the reconciliation account.

  • How do i change the search engine?

    i just wanna know how to change the search engine

  • Missing Chance to SMS Relay to iPad

    Hi, I was setting up my ipad for the new SMS relay to have it send\receive SMS messages from my iphone but I missed the opportunity to enter in the code on my iphone. I'm unable to replicate this message, I've tried to disable and enable imessage on

  • WD My Book backup drive disappeared from desktop running Lion

    WD My Book backup drive disappeared from desktop running Lion !0.7.5. Disk Utility recognized the drive and has repaired it, but it still does not show up on desktop or Time Machine. My Book also appears to hold zero data now (I've had it running bac