Using Content Manager with OLS - Oracle Label Security

There are two entries in this forum with OLS - the last one in 2005.
Has any one successfully deployed UCM with OLS?
Thanks,
Paul

Yes I have with 10gr3
It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
It worked flawlessly...not supported though
Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
Tim

Similar Messages

Using non-alphabetical symbols in Oracle Label Security API

I decide to use Oracle Label Security Release 9.0.1 , but I have some problems in realization . When I try to use function sa_policy_admin.apply_table_policy with
following parameters:
sa_policy_admin.apply_table_policy(
POLICY_NAME => 'policy1',
SCHEMA_NAME => 'domain1\user1',
TABLE_NAME => 'table1'
I receive messages :
ORA-00604: error occurred at recursive SQL level 1
ORA-00911: invalid character
ORA-00911: invalid character
ORA-06512: at "LBACSYS.LBAC_POLICY_ADMIN", line 251
ORA-06512: at line 2
Tell me please , may be there are any limitations on parameter SCHEMA_NAME in function ,
because this function can't understand symbol "\".
Note 1: It is obligatory to use symbol "\" in schema_name ,
because I have to connect to DB as external user (user of Windows 2000 Server).
Note 2: ORA-00911 invalid character
Cause: Special characters are valid only in certain places. If special characters other than $, _, and # are used in a name and the name is not enclosed in double quotation marks ("), this message will be issued. One exception to this rule is for database names; in this case, double quotes are stripped out and ignored.
Action: Remove the invalid character from the statement or encl[i]Long postings are being truncated to ~1 kB at this time.

Yes I have with 10gr3
It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
It worked flawlessly...not supported though
Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
Tim

Enabling Oracle Label Security on 9.2.0.7 database

Hi there,
I have installed the option Oracle Label Security and patched it to 9.2.0.7. I have then run the script $ORAHOME\rdbms\admin\catols.sql . Which re-starts the database.
But when I run the below example I get the below error.
SQL> CONNECT lbacsys/lbacsys
Connected.
SQL> EXECUTE SA_SYSDBA.CREATE_POLICY( -
'FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE');
BEGIN SA_SYSDBA.CREATE_POLICY( 'FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE'); END;
ERROR at line 1:
ORA-00439: feature not enabled: Oracle Label Security
ORA-06512: at "LBACSYS.LBAC_SYSDBA", line 107
ORA-06512: at "LBACSYS.SA_SYSDBA", line 43
ORA-06512: at line 1
I have also noticed that in the v$option view shows the
PARAMETER VALUE
Oracle Label Security FALSE
I have compared the number of objects to metalink article 171155.1 How to Install / Deinstall Oracle Label Security and all the objects seem to be in the schema.
Also I check the version and saw below.
SQL> conn dba/
Connected.
SQL> COL comp_name FORMAT A32
SQL> COL version FORMAT A16
SQL> SELECT
2 comp_id
3 ,comp_name
4 ,version
5 FROM dba_registry
6 where comp_id='OLS';
COMP_ID COMP_NAME VERSION
OLS Oracle Label Security 9.2.0.7.0
1 rows selected.
SQL>
Anyone know how I can enable Oracle Label Security is that it works?
TIA
Ed

I still have some old 9.2.0.8 databases running on both HP-UX and AIX and have clients on 10.2g which doesn't manifest any problem .

Trying to use Oracle Label Security with a XMLType

Hi everybody.
I'm trying to apply some of the Oracle Label Security functionalities to a table created from the annotations of a XML Schema
(Below I show part of this XML Schema:
<?xml version="1.0" encoding="UTF-8"?>
<xs:schema xmlns:xdb="http://xmlns.oracle.com/xdb"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
elementFormDefault="qualified"
attributeFormDefault="unqualified">
<xs:element name="FILE_INFO" xdb:SQLType="FILE_INFO" xdb:defaultTable="TABLE_FILE_INFO">
<xs:complexType>
<xs:choice>
<xs:element name="FILE_INFO_DICOM"
type="FILE_INFO_DICOM_TYPE" />
<xs:element name="FILE_INFO_ANALYZE"
type="FILE_INFO_ANALYZE_TYPE" />
</xs:choice>
</xs:complexType>
</xs:element>
<xs:complexType name="FILE_INFO_DICOM_TYPE" xdb:SQLType="FILE_INFO_DICOM_TYPE">
<xs:sequence>
<xs:element name="ELEMENT_INFO_DICOM"
type="ELEMENT_INFO_DICOM_TYPE"
minOccurs="0"
maxOccurs="unbounded"
xdb:defaultTable="TABLE_ELEMENT_INFO_DICOM"
xdb:SQLInline ="false"/>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ELEMENT_INFO_DICOM_TYPE" xdb:SQLType="ELEMENT_INFO_DICOM_TYPE">
<xs:all>
<xs:element name="Description" type="xs:string" minOccurs="0" maxOccurs="1" />
<xs:element name="GroupTag" type="xs:string" minOccurs="0" maxOccurs="1" />
<xs:element name="ElementTag" type="xs:string" minOccurs="0" maxOccurs="1" />
<xs:element name="VR" type="xs:string" minOccurs="0" maxOccurs="1"/>
<xs:element name="Value" type="xs:string" minOccurs="0" maxOccurs="1"/>
</xs:all>
</xs:complexType>
................etc
I've created a security policy that I have tested on relational tables (not based on any object type) and works correctly.
BEGIN
SA_POLICY_ADMIN.APPLY_TABLE_POLICY(policy_name => 'policy1',
schema_name => 'oe',
table_name => 'TABLE_FILE_INFO',
table_options => 'LABEL_DEFAULT, READ_CONTROL, WRITE_CONTROL',
label_function => NULL,
predicate => NULL);
END;
When I try to apply this policy to the XMLSchema-created table (TABLE_FILE_INFO) I get next error messages:
ORA-22856: cannot add columns to object tables
ORA-00604 error occurred at recursive SQL level 1
ORA-12445: cannot change HIDDEN property of column.
ORA-06512: in "LBACSYS.LBAC_POLICY_ADMIN", line 257
ORA-06512: in line 2
I suppose that the main problem is that the apply_plicy procedure is trying to add an extra column to a table created from a defined type.
So my questions are: It's that true? Is it possible to apply a policy to the content of XML documents, I mean, if I want to restrict that some users see some subset of a XML document based on a specific policy, is there anything similar to Oracle Label security for XML? (as defined with the annotations in the XML Schema, some elements will be mapped to rows of a XMLType-based table when a XML document is inserted into the XMLDB repository (marked to follow the previous XML Schema of course)
Hope someone can help to solve my doubts...
Thanks,
Marcos.

Have you ever answered this question? If not, have you tried to use the "HIDE" property on your table_options?

How to install "Oracle Label Security" on "Oracle Developers Day" VM?

Hello,
I downloaded and started the "Oracle Developers Day" pre-built virtual machine using VirtualBox.
I need to install Oracle Label Security in order to make some tests with it. So:
1) Do we have the installation folder of Oracle Enterprise Edition somewhere on the VM?
2) If not, how can I install OLS? Do I have to use shared folder to mount the installation media? How can I mount the installation folder, which I downloaded and stored on the host machine? Could you, please, provide step-by-step example?
Thank you in advance.
Beroetz

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

How to install Oracle Label Security in Oracle Database 10g EE

Hello All
I just want to know how to install Oracle Label Security in Oracle 10g Database EE.
I read in Oracle Enterprise Manager Grid Control Installation and Basic Configuration that Label Security must be installed before installing Enterprise Manager Grid Control.
I have Oracle Database 10g Release 1 (10.1.0.1) on my Windows XP System, and I patch it to 10.1.0.3.
M.
Sorry about my English.

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

Advance Replication and Oracle Label Security

Has anyone been able to configure both Advance Replication and Oracle Label Security to work together?

This is currently not supported in Streams. I have an enhancement request in with Oracle for this functionality. This won't be seen in 11g R2 either.
Has anyone done Label Security with Advance Replication?

Using content aware with a new layer

I am trying to use content aware with a new layer which i have made a smart object but when I select fill it is greyed out. why?.

CAF doesn't have a Sample all layers option, and needs source pixels to work on. The best you can do is select those parts of the background layer that you are happy to be sampled from, and copy them to a new layer and use CAF on that layer. This prevents gaps in the landscape being filled with a foregrounsd subject's head!
You can then add a layer mask to that layer to the new layer to use only those parts you need.

Using content management API

Hi all,
i'm a beginer in weblogic portal.
i want to use content management API to publish content, such as add content type, add content, edit content . . .
can anybody help me or give me document link.
Thanks!!!

There used to be a contentSamples App that pretty much did most of this, I cant find this online.
i have the zip for 9.2 (there shouldnt be many changes between 9.2 and 10) , if you want a copy of this app send me your email

Out of the box porlets for Content Management with BEA Portal

I am looking at BEA Portal for a simple Intranet site with some basic content management system capabilities. I would like to implement this without the use of a third party tool and wanted to know if there are any open source or out of the box BEA portlets/web-apps with basic CMS capabilities beyond what has been shown in the Portal tutorials around CMS. From doing the tutorials, I have learned how to manage content, and how to build a site from scratch to access the content using the <cm:> tags. However, without additional third party products such as Documentum or Interwoven, is there any free BEA/open source portlets to:
- Configure exposure of this content in a runtime framework? (ie content manager can expose new content from the repository by a configurable admin GUI, place where this content is on the page)
- Allow for a simple approval workflow where content that gets added to the repository by user A has to be approved by user B before automatically exposing?
Interested to know if custom portal type development is the only way to do these kind of simple functions, or third party product.

Hi,
Did you have a chance to look into WebLogic Portal 8.1 SP3? Check out the new Library Services features, which includes versioning and simple approval:
http://e-docs.bea.com/wlp/docs81/adminportal/help/CM_MAN_LifecycleOV.html
We also provide a few ootb portlets that allow users to interact with the CM system. Let us know if you have additional questions.
Best Regards,
--alex

How to use content presenter with a multilanguage site

I would you like to know if it's possible to manage a content presenter with multi language ? Normally, if i would show a content with a template view , i choose a UCM content to the parameter interface of the content presenter. Anybody has found a solution to found automatically the right content when i choose a another language. For example, i create a content presenter associated to a English content on UCM , is it possible when the user changes his language to spanish for example to have the related content in spanish or not ?

There are a few options to do this but it requires quite a lot of customizations. Unfortunatly there is no out of the box solutoins to tackle this issue.
First of all you have to make sure the content in UCM is related to each other so when you have a document in english, you can easily find the same document in another language. This can be based upon additional meta fields or by using the related content component.
You probably also want to setup a workflow so when an english (or any language) document is checked in, the workflow kicks in and notify some other users so they know they have to translate that document.
In Webcenter you have to make sure that the content presenter can show content based upon language. Normaly you can't realy build dynamic queries in the content presenter and when you select all the content from a folder, there is no way to add filters based upon language.
In order to solve this issue, you can use the personalization server. By creating a scenario that takes the language as an input parameter (or by just querying the profile) you can build a dynamic CMIS query that can be used to power the content presenter. When you have configured the personalization server and create a scenario, you will be able to select that scenrio in the content presenter instead of selecting items or folder.
It's quite a bit of work to make it multilingual but currently this is the only solution i have found...

Using IPTV Manager With IIS??

Has any one tried configuring the IPTV Manager to work with IIS?

OK, Just being curious.
The documentation has some examples for creating web pages using embedded plugins, including program directories (in a drop-down menu).
I have a standing demo at work that uses the web page / embedded plug-ins that's pretty much just the demos in the book edited to match our system.
That'll cover the user-side; I'm not sure if the Content Manager functions can be re-mapped to another system. Most of the actual functions are handled in perl, so I suppose it's just a matter of linking up the perl scripts to a different page.
Another approach may be to use the Windows Media Streaming system to control the addition of content, and use the web page w/ plug-ins to stream it to the end users. IPTV and WIndows Media system will work cooperatively. Basically, they just share a single content directory.
If I get a chance, I'll play with it and see what I can come up with. We have at least one of each Cisco IPTV units in the Lab, along with some MS W2K servers.
Good Luck
Scott

Content management with FrameMaker

The company I work for has had a customized EDD built for structured FrameMaker. A template was developed from the EDD and the authors make technical manuals with this template. Our manuals are printed in pdf and on hard copy. We do not have any current plans to publish on the web. We are currently using FrameMaker 7.2 and will soon go to version 8.0.....anyway, the "powers that be" are looking into a Content Management system for us. A portion of our company is using XMetal with the content management system. Is it possible, with the use of DITA, to continue to use FrameMaker with content management, in conjunction with an XMetal system? We DO NOT want to lose the WYSIWYG capability. On the other hand, are there any suggestions of how to build a type of data/content management system with elements in Structured FrameMaker? As I said earlier, we publish our manuals pdf or hard copy, so keep that in mind. Thanks, Vera

Hi Vera...
It really depends on the CMS and how it integrates with the authoring tools. There's no problem sharing DITA files between Frame and XMetaL, but the CMS may have a special connector with XMetaL that hasn't been developed for Frame. It may be that you'll have to request that the CMS vendor develop a similar connector for FM if it doesn't exist. If the CMS doesn't make use of a connector for XMetaL .. and you just check out files then check them back in .. this process should work fine for FM as well.
Feel free to contact me off line for more info if you need help developing a connector for FM.
Regards,
...scott
Scott Prentice
Leximation, Inc.
www.leximation.com
415.485.1892

How to use A RowSet with an Oracle sequence

Hi,
I created a RowSet with the RowSet wizard and it asked me if I wanted to use database created primary keys. I'm using Oracle so I selected this option and want to use Oracle sequences. But I don't find where should I configure the name of the Oracle sequence. Accordingly I cannot insert through the RowSet.
Many thanks in advance.
Nick

b j t wrote:
Pancenter wrote:
That seems kind of strange...
I have a 10.1" Acer Android tablet that can use a bluetooth and/or USB mouse and keyboard.
I do realize that Android has "input" ports, the point I am making is that the iPad does not.
The question the OP asked was:
Why is there no application to run a mouse on an iPad? I would like to be able to work with Numbers and Pages withouit having to keep touching the screen.
and I stand by the answer I gave which was:
There is NO way to use a mouse with the iPad, you will have to either use your finger or a stylus to navigate around the screen.
You may have to stand down. Youtube is swarmed with instructional video's about how to use Mouse (and keyboard) with an iPad. So there is a way. I don't understand why you insist on something when it clearly and easy Googly discoverably is not true.

Various problems using extension manager with command line

Hello all,
We are installing our plugins to CS4/5/5.1 version of Adobe Photoshop as part of our installer and allow the users to select specific versions of Photoshop to install the panel for. There are a few old problems that I wanted to rant about for quite some while and now with a whole bunch of problems that the 5.1 update introduced I feel I just have to voice them. I will limit it to PC only as it seems to be the most troubled platform
#1 As we cannot install our plugin only by using the Extension Manager (simply because it cannot handle all we've to do upon the installation) we have to run commands from within the our installer, non-interactively, of course.
The interface to command line installation is xmancommand.exe (or "Extension manager (Version). exe" - not sure whether it makes any difference. ). Now the first question is how to find this executable on the target machine, from an installer. Users may specify different locations to install the Creative Suite and it certainly does NOT have to be C:\Program Files\...(or %PRGRAMFILES% in general). ATM we are using an odd place in the registry to to find the path to the most recent Extension Manager but first its sometimes overwritten by another installation and in any case it only shows ONE version of the extension manager which of course cannot handle other versions (see #2)
#2 Why the most recent version of Adobe Extension Manager (5.5) cannot install the extension for 5.0? Well, install it actually does, however its disabled for CS5 and it seems that the only way to enable it on this platform is to find previous (CS5) extension manager and to enable it. Oh, actually no - it doesn't work! The only way that I found here working is to find CS5 extension manager first, install the extension there and then use CS5.5 extension manager to enable it. Why do I need both utilities to manage my extensions?!
#3 The program is severely lacking in documentation AND it doesn't produce reasonable output messages, so determining what it can actually support is a puzzle. For example, why "Dreamweaver CS5" is a correct product name and "Photoshop CS5" is not (don't different teams talk to each other)? Ok, lets forget the consistency, but how do I make the utility output the list of all products it supports, in their magic token form that it will actually be understood if passed in in the command line? By trial and error? This menthod btw is also extremely painful: nany times when specifying wrong parameters the program doesn't provide any output and just shrugs "whatever, go figure it yourself"...
#4 Why the only way to enable/disable an extension in Photoshop seems to be using magic "productfamily" keyword that is not even listed on Adobe's help page for command line options (here: http://help.adobe.com/en_US/extensionmanager/cs/using/WSB4845EDD-14E5-476a-B749-FF328830D1 4F.html).? E.g. "xmancommand.exe" -suppress -remove product=Photoshop extension=OurExtension" will ALWAYS fail with a lovely "'Photoshop is not supported by Extension Manager CS5.5." error; I've tried "PhotoshopCS5", "Photoshop CS5", "PhotoshopCS5.1" "Photoshop CS5.1", "Photoshop-12" (mentioned in examples section in http://help.adobe.com/en_US/extensionmanager/cs/using/packaging_extension.pdf ) and a whole bunch of other permutations - none seem to work (see #3). Magic "productfamily=Photoshop" does work. But then it only aims the current version ("CS5.1") and I need it to work for CS5 (I'm not even mentioning CS4...."). Would there be any suggestions?
Really, the question is, how do we, third-party developers, are supposed to interact with the command-line utility without knowing where it is, what product names is capable to work with and without being able to target specific platforms (i86 vs x64 anyone (http://forums.adobe.com/thread/672537)? CS5 vs CS5.1 (above)?). I don't know what your test cases are for the command line tool (if any!), but this is simply insane, folks, simply insane.

I am sorry for the poor documentation of Extension Manager which causes you so much trouble.
1. You can use BridgeTalk API to ask specific version of Extension Manager to do something. There is sample in packaging_extension.pdf about this. You don't need to know the installation path of Extension Manager. One thing to note is that the value of bt.target is version specific, i.e. "exman-5.0", "exman-5.5" send this message to different version of Extension Manager, so you can change this value to install/enable/disable/remove extensions using different version of Extension Manager. More detailed documentation of BridgeTalk can be found by clicking "Help" menu then clicking "Javascript Tools Guide CS5" in "Adobe ExtendScript Toolkit CS5".
2. Specific version of Extension Manager only manage extensions for corresponding version of product. You should use Extension Manager CS5 to install extensions for Photoshop CS5. The reason that the extension you installed for Photoshop CS5.1 using Extension Manager CS5.5 is displayed for Photoshop CS5 in Extension Manager CS5 is that two versions of Photoshop specified the same directory for Extension Manager to manage extensions. This is a defect and will cause some problems if multiple versions of Photoshop co-existed in one machine. But "to find previous (CS5) extension manager and to enable it" should work for you, I guess you use command line to enable it and specify wrong product name (see #3) so that it doesn't work.
3. When using command line, you should specify "product" attribute with the name displayed at the left panel of Extension Manager. So "Photoshop CS5 32" is correct. Remember to enclose it with double quote because of existence of space character.
4. As above mentioned, use display name of Photoshop, and call proper version of Extension Manager by BridgeTalk.

Using Content Manager with OLS - Oracle Label Security

Similar Messages

Maybe you are looking for