11.07.2015 Views

Oracle Database 11 g - Online Public Access Catalog

Oracle Database 11 g - Online Public Access Catalog

Oracle Database 11 g - Online Public Access Catalog

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

CHAPTER 5 ■ DATABASE SECURITY 253<strong>Database</strong> Experts.........Since this example returns a valid HTML page, you can conclude that the ACL host assignmentworked as planned. If the sufficient ACL privileges or ACL assignments are not provided,you will receive the dreaded ORA-24247 error:SQL> select utl_http.request('http://dbaexpert.com') from dual;*ERROR at line 1:ORA-29273: HTTP request failedORA-06512: at "SYS.UTL_HTTP", line 1577ORA-24247: network access denied by access control list (ACL)ORA-06512: at line 1■Note If you are testing the setup using the DBMS_NETWORK_ACL_ADMIN package, make sure you commit. Allchanges to the ACL are transactional. Records must be committed like any other database records.Maintain <strong>Access</strong> Control ListsTwo more procedures to maintain the fine-grained access of UTL APIs are DROP_ACL and DELETE_PRIVILEGE. Use the DROP_ACL procedure to remove the XML file from the /sys/acls directory.Use DELETE_PRIVILEGE to remove an access control entry from the XML file. For example, if youwant to remove CKIM’s ACE from the dba.xml control list, you would simply execute thefollowing:1 begin2 dbms_network_acl_admin.DELETE_PRIVILEGE3 (ACL =>'dba.xml',4 PRINCIPAL => 'CKIM');5* end;SQL> /PL/SQL procedure successfully completed.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!