{16 追加}PDBロックダウンプロファイルを作成

 

https://docs.oracle.com/cd/F19136_01/multi/managing-security-for-a-multitenant-environment.html#GUID-AB5E62DB-7E2A-4B5A-BA96-A2BD2DF15275

conn / as sysdba

SET LINESIZE 150
COL PROFILE_NAME FORMAT a20
COL RULE FORMAT a20
COL CLAUSE FORMAT a25

SELECT PROFILE_NAME, RULE, CLAUSE, STATUS FROM CDB_LOCKDOWN_PROFILES;

CREATE LOCKDOWN PROFILE prof1;
ALTER LOCKDOWN PROFILE prof1 DISABLE STATEMENT  = ('CREATE TABLE');

SELECT PROFILE_NAME, RULE, CLAUSE, STATUS FROM CDB_LOCKDOWN_PROFILES;

alter session set container=pdb11;

show parameter pdb_lockdown;
ALTER SYSTEM SET PDB_LOCKDOWN = prof1;
show parameter pdb_lockdown;

create table tab123(col1 int);

conn / as sysdba

SET LINESIZE 150
COL PROFILE_NAME FORMAT a20
COL RULE FORMAT a20
COL CLAUSE FORMAT a25

SELECT PROFILE_NAME, RULE, CLAUSE, STATUS FROM CDB_LOCKDOWN_PROFILES;

DROP LOCKDOWN PROFILE prof1;

SELECT PROFILE_NAME, RULE, CLAUSE, STATUS FROM CDB_LOCKDOWN_PROFILES;

alter session set container=pdb11;

create table tab123(col1 int);

show parameter pdb_lockdown;
ALTER SYSTEM SET PDB_LOCKDOWN = '';
show parameter pdb_lockdown;