Databases Reference
In-Depth Information
With
statement_types
on line 8, you should specify the statement for which the
policy needs to be applied. In the preceding example, the policy is applied only for
the
SELECT
statements. You can specify
INSERT
,
UPDATE
,
DELETE
, and
INDEX
besides
the
SELECT
statement, or a combination of all. By default, all statements except the
INDEX
statement are applied.
The last argument in the VPD policy function is
enable
(line 9). This means that the
VPD policy is enabled and effective immediately.
Executing a
Select
statement in the table involved will show different results,
depending on the user that is logged in. In the following screenshot, the
ADMIN
user
is logged in. As you can see, all the data in the sample table is shown:
When the other user,
noadmin
, is logged in, none of the data is shown:
In both situations, the
SELECT
statement is identical. The VPD policy function
generated the predicate, and is applied transparently to the executed statement.
