2 Replies Latest reply: Sep 24, 2012 6:42 AM by 921598 RSS

    Object invalidation

    963874
      i have a synonym to which i applied policy, when i apply it , it makes the PLSQL depending upon the same synonym invalidated.
      Why every this these PLSQL objects become invalid?
        • 1. Re: Object invalidation
          Harm Joris ten Napel-Oracle
          hi,

          purely out of the top of my head this makes perfect sense from a security perspective, since when you apply
          a policy we need to invalidate all existing cursors referencing the object, remember security policies are applied
          at parse time, for example adding restricting predicates, by invalidating the entire chain we make sure existing
          cursors can no longer be used that could potentially bypass the new security enforcment of your policy.


          Please note we are currently actively promoting the new support communities also, so if you want to get some
          feedback from your peers as well as the attention of Oracle support engineers, please go to

          https://communities.oracle.com/portal/server.pt/community/database_security_products/338

          This will put you in the Database Products Security community , but you can select others also from the left,

          Greetings,

          Harm ten Napel
          Oracle Support
          • 2. Re: Object invalidation
            921598
            Altering/adding/dropping a policy on a synonym updates the corresponding row cache and library cache entries for the synonym and it invalidates all objects dependent on the synonym. If the dependency chain is not very deep, the problem can be ignored ,on subsequent access the dependent objects are validated transparently.
            To avoid such issue you can apply policy directly on the base table.

            Regards
            Inam Bukhari
            http://dbmentors.blogspot.com