COMMON_USER_CONNECT lockdown profiles feature in Oracle Database 19c
After upgrading some CDBs to 19c, we hit the problem of not being able to connect as common users to the PDBs. In all affected CDBs, lockdown profiles were in place with following definition regarding common user connection part: It worked well in 12c, but…
How to generate DDLs of existing lockdown profiles
In my last blog post I mentioned that I’ll write a new one on how to generate DDLs to recreate existing lockdown profiles – the time has come :). When I had to do it for the first time, I thought it would be as…
Lockdown profiles definition – NUL character
Playing more with lockdown profiles, I have discovered another interesting bit. For some entries and some columns of CDB/DBA_LOCKDOWN_PROFILES views (which are based on LOCKDOWN_PROF$ table), there is unnecessary NUL (ASCII code 0) character added at the end. In our environment it was the case…
Lockdown profiles definition inconsistencies
While working recently on lockdown profiles in 12.2 database with January 2020 Release Update installed, together with my colleague Loïc Fave, we have discovered some inconsistencies in how the information about already defined lockdown profiles is stored and used to enforce the rules. Loïc has…