Playing more with lockdown profiles, I have discovered another interesting bit. For some entries and some columns of CDB/DBA_LOCKDOWN_PROFILES views (which are based on LOCKDOWN_PROF$ table), there is unnecessary NUL (ASCII code 0) character added at the end. In our environment it was the case for all OPTION$ (CLAUSE_OPTION column of the views) and only some of CLAUSE columns (the same name as in the views).
Month: November 2020
Lockdown profiles definition inconsistencies
While working recently on lockdown profiles in 12.2 database with January 2020 Release Update installed, together with my colleague Loïc Fave, we have discovered some inconsistencies in how the information about already defined lockdown profiles is stored and used to enforce the rules.
Continue reading “Lockdown profiles definition inconsistencies”