Step 3: Create the ACCESS_LOCATIONS Oracle Label Security Policy

Next, you are ready to create the ACCESS_LOCATIONS policy.

To create the ACCESS_LOCATIONS policy: 

1. Log in to Database Control as user LBACSYS.

   Select Logout, and then select Login. In the Login page, log in as user LBACSYS. Set Connect As to Normal. Select Login to log in.

2. Click Server to display the Server subpage.

3. In the Security section, click Oracle Label Security.

   The Label Security Policies page appears.

4. Click Create.

5. In the Create Label Security Policy page, enter the following information:

   • Name: ACCESS_LOCATIONS

   • Label Column: OLS_COLUMN

     Later on, when you apply the policy to a table, the label column is added to that table. By default, the data type of the policy label column is NUMBER(10).

   • Hide Label Column: Deselect this box so that the label column will not be hidden. (It should be deselected by default.)

     Usually, the label column is hidden, but during the development phase, you may want to have it visible so that you can check it. After the policy is created and working, hide this column so that it is transparent to applications. Many applications are designed not to show an another column, so hiding the column prevents the application from breaking.

   • Enabled: Select this box to enable the policy. (It should be enabled by default.)

   • Inverse user's read and write groups (INVERSE_GROUP): Do not select this option.

   • Default Policy Enforcement Options: Select Apply Policy Enforcements, and then select the following options:

     For all queries (READ_CONTROL)

     To use session's default label for label column update (LABEL_DEFAULT)

6. Click OK.

   The ACCESS_LOCATIONS policy appears in the Label Security Policies page.