Skip Headers

Oracle® Label Security Administrator's Guide 10g Release 2 (10.2) Part Number B14267-02 |
Home | Book List | Contents | Master Index | Feedback

Previous
| View PDF

# Index

A B C D E F G H I L M N O P R S T U V W

## A

  access control
    discretionary, 1.1.3.1, 1.1.3.3, 3.5.4
    label-based, 1.3.3, 1.3.4.5
    policies, 1.1.2
    understanding, 3
  access mediation
    and views, 3.5.5
    enforcement options, 3.5.7
    introduction, 3.1
    label evaluation, 3.4
    program units, 3.5.6
  ADD_COMPARTMENTS function, 7.2.5, 7.2.5, 7.2.5, 7.2.5
  ADD_GROUPS procedure, 7.2.8
    inverse groups, 14.8.3
  ALL_CONTROL option, 8.1.1, 8.1.1, 8.1.1, 8.1.5
  ALL_SA_AUDIT_OPTIONS view, C.1.2.1
  ALL_SA_COMPARTMENTS view, C.1.2.2
  ALL_SA_DATA_LABELS view, C.1.2.3
  ALL_SA_GROUPS view, C.1.2.4
  ALL_SA_LABELS view, C.1.2.5
  ALL_SA_LEVELS view, C.1.2.6
  ALL_SA_POLICIES view, C.1.2.7
  ALL_SA_PROG_PRIVS view, C.1.2.8
  ALL_SA_SCHEMA_POLICIES view, C.1.2.9
  ALL_SA_TABLE_POLICIES view, C.1.2.10
  ALL_SA_USER_LABELS view, C.1.2.12
  ALL_SA_USER_LEVELS view, C.1.2.13
  ALL_SA_USER_PRIVS view, C.1.2.14
  ALL_SA_USERS view, C.1.2.11
  ALTER_COMPARTMENT procedure, 6.5.6
  ALTER_COMPARTMENTS procedure, 7.2.4
  ALTER_GROUP procedure, 6.5.9
  ALTER_GROUP_PARENT
    inverse groups, 14.8.10
  ALTER_GROUP_PARENT procedure, 6.5.10
  ALTER_GROUPS function, 7.2.9
  ALTER_GROUPS procedure
    inverse groups, 14.8.4
  ALTER_LABEL function, 6.6.2
  ALTER_LEVEL procedure, 6.5.1, 6.5.3
  ALTER_POLICY procedure, 6.4.5
    inverse groups, 14.8.2
  ALTER_SCHEMA_POLICY procedure, 9.3, 9.5.2
  ANALYZE command, 13.4.1
  APPLY_SCHEMA_POLICY procedure, 9.3, 9.5.1
    with inverse groups, 14.3.1
  APPLY_TABLE_POLICY procedure, 9.3, 9.4.1
    with inverse groups, 14.3.1
  architecture, Oracle Label Security, 1.1.3.3
  AS SYSDBA clause, 13.5
  AUDIT procedure, 11.3.2
  AUDIT_LABEL procedure, 11.4.1, 11.4.3
  AUDIT_LABEL_ENABLED function, 11.4.3
  AUDIT_TRAIL parameter, 11.2
  auditing
    audit trails, 1.1.3.3, 11.1, 11.2, 11.5.1
    options for Oracle Label Security, 11.3.1
    Oracle Label Security, 11, 11.1
    security and, 11.3.2
    strategy, 11.6.1
    systemwide, 11.2
    types of, 6.1.7
    views, 11.5.1

## B

  B-tree indexes, 13.4.2

## C

  CHAR_TO_LABEL function, 4.3.1, 4.5.1, 4.5.5
  characters, valid, 2.2.1, 2.2.1, 6.4.3
  CHECK_CONTROL option
    and label update, 8.4.2, 8.4.3
    and labeling functions, 8.3.1
    definition, 8.1.1, 8.1.1
    with other options, 8.1.6
  child rows
    deleting, 8.5
    inserting, 8.3.3
    updating, 8.4.4
  Common Criteria, 1.1.1
  COMP_READ function, 4.6.6.2
  COMP_WRITE function, 4.6.6.2
  COMPACCESS privilege, 3.5.1, 3.5.2.3
    inverse groups, 14.3.5, 14.6
  compartments
    definition, 2.2.3
    example, 2.2.3
    setting authorizations, 3.3.1.2
  COMPATIBLE parameter, 13.5
  components. See label components
  CON, B.2
  connection parameters, B.2
  CREATE FUNCTION statement, 10.3.1
  CREATE PACKAGE BODY statement, 10.3.1
  CREATE PACKAGE statement, 10.3.1
  Create Policy icon, 6.1.1, 6.4
  CREATE PROCEDURE statement, 10.3.1
  CREATE TABLE AS SELECT statement, C.2.1
  CREATE_COMPARTMENT procedure, 6.5.5
  CREATE_GROUP procedure, 6.5.8
    inverse groups, 14.8.9
  CREATE_LABEL procedure, 6.6.1
  CREATE_LEVEL procedure, 6.5.2
  CREATE_POLICY procedure, 6.1.1, 6.4.4
    inverse groups, 14.8.1
  CREATE_VIEW procedure, 11.5.1, C.1.3
  creating databases, 13.5

## D

  DAC. See discretionary access control (DAC)
  data
    access rules, 1.3.1
    label-based access, 2.1, 2.1
    sensitivity, 1.3.4.1, 6.6.2
  data dictionary tables, 7.1, 7.7.1, 13.4.1, 13.5, C.1.1
  DATA_LABEL function, 10.4.1.3
  database links, 12.2
  Database Management System Protection Profile (DBMS PP), 1.1.1
  databases, creating additional, 13.5
  DBA_policyname_AUDIT_TRAIL view, C.1.3
  DBA_SA_AUDIT_OPTIONS view, 11.3.4, C.1.2.15, C.1.3
  DBA_SA_COMPARTMENTS view, 13.2.2, C.1.2.16
  DBA_SA_DATA_LABELS view, C.1.2.17
  DBA_SA_GROUP_HIERARCHY view, C.1.2.19
  DBA_SA_GROUPS view, 13.2.2, C.1.2.18
  DBA_SA_LABELS view, 13.2.2, C.1.2.20
  DBA_SA_LEVELS view, 13.2.2, C.1.2.21
  DBA_SA_POLICIES view, C.1.2.22
  DBA_SA_PROG_PRIVS view, C.1.2.23
  DBA_SA_SCHEMA_POLICIES view, 8.1.8, C.1.2.24
  DBA_SA_TABLE_POLICIES view, 8.1.8, C.1.2.25
  DBA_SA_USER_COMPARTMENTS view, 7.7.2, C.1.2.27
  DBA_SA_USER_GROUPS view, 7.7.2, C.1.2.28
  DBA_SA_USER_LABELS view, C.1.2.29
  DBA_SA_USER_LEVELS view, 7.7.2, C.1.2.30
  DBA_SA_USER_PRIVS view, C.1.2.31
  DBA_SA_USERS view, 7.7, C.1.2.26
  default port, B.2
  default row label, 4.6.3
  DELETE_CONTROL option, 8.1.1, 8.1.1, 8.5
  DELETE_RESTRICT option, 8.5
  deleting labeled data, 8.5
  demobld.sql file, 6.3.1.1
  DISABLE_POLICY procedure, 6.4.6
  DISABLE_SCHEMA_POLICY procedure, 9.3, 9.5.4
  DISABLE_TABLE_POLICY procedure, 9.3, 9.4.3
  discretionary access control (DAC), 1.1.3.1, 3.5.4
  distributed databases
    connecting to, 12.2
    multiple policies, 3.6.2
    Oracle Label Security configuration, 12.1
    remote session label, 12.3
  dominance
    definition, 3.4.2, 3.4.2
    functions, A.1.3
    greatest lower bound, 4.4.4.2
    inverse groups, 14.9
    least upper bound, 4.4.4.1
    overview, A.1.1
  DOMINATED_BY function, A.1.3, A.1.3.3, A.1.3.7
  DOMINATES function, A.1.1, A.1.3, A.1.3.1, A.1.3.5
  DROP USER CASCADE restriction, C.2.4
  DROP_ALL_COMPARTMENTS procedure, 7.2.7
  DROP_ALL_GROUPS procedure, 7.2.11
  DROP_COMPARTMENT procedure, 6.5.7
  DROP_COMPARTMENTS function, 7.2.6
  DROP_GROUP procedure, 6.5.11
  DROP_GROUPS procedure, 7.2.10
  DROP_LABEL function, 6.6.3
  DROP_LEVEL procedure, 6.5.4
  DROP_POLICY procedure, 6.4.8
  DROP_USER_ACCESS procedure, 7.3.4
  DROP_VIEW procedure, 11.5.2
  duties, of security administrators, 6.2

## E

  ENABLE_POLICY procedure, 6.4.7
  ENABLE_SCHEMA_POLICY procedure, 9.3, 9.5.5
  ENABLE_TABLE_POLICY procedure, 9.3, 9.4.4
  enforcement options
    and UPDATE, 8.4.2
    combinations of, 8.1.6
    exemptions, 8.1.7
    guidelines, 8.1.6
    INVERSE_GROUP, 14.3.1
    list of, 8.1.1
    overview, 8.1.1
    viewing, 8.1.8
  Evaluation Assurance Level (EAL) 4, 1.1.1
  EXEMPT ACCESS POLICY privilege, 8.1.7, 8.1.7
  Export utility
    LBACSYS restriction, C.2.3
    policy enforcement, 8.1.7
    row labels, 3.5.2.1, 13.1, 13.2.2

## F

  FULL privilege, 3.5.1, 3.5.2.2, 3.5.2.4
  function call, D.1, D.2

## G

  GLBD function, 4.4.4.2
  granularity, data access, 3.4.3
  GREATEST_LBOUND function, 4.4.4.2, 10.4.3.1
    inverse groups, 14.8.14
  GROUP_READ function, 4.6.6.2
  GROUP_WRITE function, 4.6.6.2
  groups
    definition, 2.2.4
    example, 2.2.4
    hierarchical, 2.2.4, 2.2.4, 2.4, 2.4, C.1.2.19
    inverse, 14.2
    parent, 2.2.4, 2.2.4, 2.2.4, 3.4.1.2, 3.4.1.2, 6.5.8, 6.5.10, 14.3.4
    read/write access, 3.4.1.2
    setting authorizations, 3.3.1.3

## H

  HIDE, 4.1.1.1, 6.4.4, 6.4.5
  HIDE option
    default, 6.4.4
    discussion of, 8.1.2
    example, 4.1.1.3
    importing hidden column, 13.2.5
    inserting data, 4.5.4
    not exported, 13.1
    per-table basis, 4.3.2.2
    PL/SQL restriction, C.2.6
    schema level, 8.1.1

## I

  Import utility
    importing labeled data, 13.2.1.2, 13.2.2
    importing policies, 13.1
    importing unlabeled data, 13.2.4
    with Oracle Label Security, 13.2
  indexes, 13.4.2, 13.4.2
  INITIAL_LABEL variable, A.2
  INITIAL_ROW_LABEL variable, A.2
  initialization parameters
    AUDIT_TRAIL, 11.2
    COMPATIBLE, 13.5
  INSERT_CONTROL option, 8.1.1, 8.1.1, 8.3.1
  inserting labeled data, 4.5, 8.3
  INTO TABLE clause, 13.3.2
  inverse groups
    and label components, 14.3.2
    COMPACCESS privilege, 14.3.5, 14.6
    computed labels, 14.3.3
    dominance, 14.9
    implementation of, 14.3
    introduction, 14.2
    Max Read Groups, 14.3.3.2
    Max Write Groups, 14.3.3.2
    parent-child unsupported, 14.3.4
    read algorithm, 14.4
    session labels, 14.7
    SET_DEFAULT_LABEL, 14.7.1
    SET_LABEL, 14.7.2
    SET_ROW_LABEL, 14.7.1, 14.7.2
    user privileges, 14.3.5
    write algorithm, 14.5
  INVERSE_GROUP enforcement option
    behavior of procedures, 14.8
    implementation, 14.3.1

## L

  label components
    defining, 6.1.2, 6.5
    in distributed environment, 12.4
    industry examples, 2.2.5
    interrelation, 2.4
    valid characters, 2.2.1, 2.2.1, 6.4.3
  label evaluation process
    COMPACCESS read, 3.5.2.3
    COMPACCESS write, 3.5.2.3
    inverse groups, COMPACCESS, 14.6
    LABEL_UPDATE, 8.4.2
    read access, 3.4.2
    read access, inverse groups, 14.4
    write access, 3.4.3
    write access, inverse groups, 14.5
  LABEL function, 4.6.6.2
  label tags
    converting from string, 4.3.1
    converting to string, 4.3.2
    distributed environment, 12.4.1
    example, 4.1.2.1
    inserting data, 4.5.2
    introduction, 2.3
    manually defined, 4.1.2.1, 4.1.2.2
    strategy, 13.4.3
    using in WHERE clauses, 4.4.1
  LABEL_DEFAULT option
    and labeling functions, 8.1.3.1, 8.2.1, 8.2.2
    authorizing compartments, 3.3.1.2
    authorizing groups, 3.3.1.3
    definition, 8.1.1
    importing unlabeled data, 13.2.4
    inserting labeled data, 4.5.3
    with enforcement options, 8.1.6, 8.1.6
    with SET_ROW_LABEL, 4.6.3
  LABEL_TO_CHAR function, 4.3.2, 4.3.2.1.3, 4.4.3
  LABEL_UPDATE option
    and labeling functions, 8.1.3.2, 8.2.2
    and privileges, 8.1.3.2
    and WRITE_CONTROL, 8.1.4.2
    and WRITEDOWN, 3.5.3
    and WRITEUP, 3.5.1, 3.5.1, 3.5.1, 3.5.3
    definition, 8.1.1, 8.1.1
    evaluation process, 8.4.2
    with enforcement options, 8.1.6
  label-based security, 2.1
  labeling functions
    ALL_CONTROL and NO_CONTROL, 8.1.5
    and CHECK_CONTROL, 8.3.1
    and LABEL_DEFAULT, 8.1.3.1, 8.1.3.2, 8.2.1
    and LABEL_UPDATE, 8.1.3, 8.1.3.3
    and LBACSYS, 8.2.2
    creating, 8.2.3
    example, 8.2.1
    how they work, 8.2.2
    importing unlabeled data, 13.2.4
    in force, 8.1.3
    inserting data, 4.5.3
    introduction, 3.5.7
    override manual insert, 8.3.2
    specifying, 8.2.4
    testing, 8.2.2
    UPDATE, 8.4.3
    using, 8.2.1
    with enforcement options, 8.1.6, 8.1.6
  labels
    administering, 2.5
    and performance, 3.5.2.1
    data and user, 2.4
    merging, 4.4.5
    non-comparable, A.1.2
    relationships between, A.1
    syntax, 2.3
    valid, 2.3, 4.1.2
    with inverse groups, 14.3.3
  Labels property sheet, 6.1.2, 6.1.3
  LBAC_DBA role, 6.4.1
  LBAC_LABEL datatype, 8.2.2
  LBACSYS schema
    and labeling functions, 8.2.2
    creating additional databases, 13.5
    data dictionary tables, 13.4.1
    export restriction, 13.1, C.2.3
  LEAST_UBOUND function, 4.4.4.1, 4.4.5, 10.4.3.2
    inverse groups, 14.8.13
  levels
    definition, 2.2.2
    example, 2.2.2
    setting authorizations, 3.3.1.1
  LUBD function, 4.4.4.1

## M

  materialized views, 12.6.1.1, 12.6.3.2
  Max Read Groups, 14.3.3.2
  Max Write Group, 14.3.3.2, 14.3.3.2
  MAX_LEVEL function, 4.6.6.2
  MERGE_LABEL function, 4.4.5, 4.4.5
  MIN_LEVEL function, 4.6.6.2

## N

  NO_CONTROL option, 8.1.1, 8.1.1, 8.1.5
  NOAUDIT procedure, 11.3.1, 11.3.3, 11.3.3, 11.4.2
  NUMBER datatype, 4.1.1
  NUMERIC_LABEL function, 10.4.1.1
  NUMERIC_ROW_LABEL function, 10.4.1.2

## O

  object privileges
    and Oracle Label Security privileges, 3.5.4
    and trusted stored program units, 3.5.6, 10.1.1
    discretionary access control, 1.1.3.3
  OCI example, A.2.5
  OCI interface, A.2
  OCI_ATTR_APPCTX_LIST, A.2.2
  OCI_ATTR_APPCTX_SIZE, A.2.1
  OCIAttrGet, A.2.2
  OCIAttrSet, A.2, A.2.1, A.2.4
  OCIParamGet, A.2.3
  OptionsA, B.2.1
  Oracle Internet Directory Administrator's Guide, 5.10
  Oracle Policy Manager
    administering labels, 2.5
    applying policies, 6.1.4, 9.3
    authorizing trusted program units, 6.1.6
    authorizing users, 6.1.5, 7.1
    configuring auditing, 6.1.7
    creating policies, 6.1.1, 6.4
    defining label components, 6.1.2
    identifying valid labels, 6.1.3
    introduction, 6.3.2
  ORDER BY clause, 4.4.1, 4.4.2

## P

  packages
    Oracle Label Security, 6.3.1
    trusted stored program units, 10.1
  partitioning, 4.1.2.2, 13.4.4
  performance, Oracle Label Security
    ANALYZE command, 13.4
    indexes, 13.4.2
    label tag strategy, 13.4.3
    partitioning, 13.4.4
    READ privilege, 3.5.2.1
  PL/SQL
    creating VPD policies, 1.3.2
    overloaded procedures, 6.5.1
    recreating labels for import, 13.2.2
    SA_UTL package, 10.4
    trusted stored program units, 10.1
  policies
    applying to schemas, 9.3, 9.5
    applying to tables, 9.3, 9.4
    creating, 6.1.1
    enforcement guidelines, 8.1.6
    enforcement options, 1.3.4.4, 3.5.7, 4, 8.1.1, 8.1.1, 8.1.6
    managing, 6.4
    multiple, 4.1.2, 7.1, C.2.2
    privileges, 1.1.3.3, 1.3.4.3, 3.5.4, 7.4
    terminology, 9.1
  policy label column
    indexing, 13.4.2
    inserting data when hidden, 4.5.4
    introduction, 4.1.1, 4.1.1
    retrieving, 4.3.2.1.1
    retrieving hidden, 4.3.2.2
    storing label tag, 2.3
  policy_DBA role, 6.2, 6.4.2, 6.6, 7.1, 7.4, 9.4, 9.5
  predicates
    access mediation, 3.5.7
    errors, 8.6.1
    label tag performance strategy, 13.4.3
    multiple, 8.6.2
    used with policy, 8.6.1
  privileges
    COMPACCESS, 3.5.1, 3.5.2.3
    FULL, 3.5.1, 3.5.2.2, 3.5.2.4
    Oracle Label Security, 3.5.1
    PROFILE_ACCESS, 3.5.1, 3.5.2.4
    program units, 3.5.6
    READ, 3.5.1, 3.5.2.1
    row label, 3.5.3
    trusted stored program units, 10.3.5
    WRITEACROSS, 3.5.1, 3.5.3, 3.5.3.3
    WRITEDOWN, 3.5.1, 3.5.3, 3.5.3.2, 3.5.6
    WRITEUP, 3.5.1, 3.5.3, 3.5.3.1
  PRIVS function, 4.6.6.2
  procedures, overloaded, 6.5.1
  PROFILE_ACCESS privilege, 3.5.1, 3.5.2.4
  propagated, D.1

## R

  RAC, D.1
  read access
    algorithm, 3.4.2, 3.5.2.2
    introduction, 3.4.1.1
  read label, 3.3.2
  READ privilege, 3.5.1, 3.5.2.1
  READ_CONTROL option
    algorithm, 3.4.2
    and CHECK_CONTROL, 8.1.3.3
    and child rows, 8.3.3
    definition, 8.1.1, 8.1.1
    referential integrity, 8.4.4
    with other options, 8.1.6
    with predicates, 8.6.1
  READ_ONLY function, 7.2.4, 7.2.5, 7.2.8, 7.2.9
  READ_WRITE function, 7.2.4, 7.2.5, 7.2.8, 7.2.9
  reading down, 3.4.2
  referential integrity, 8.3.3, 8.4.4, 8.5
  releasability, 14.2
  remote users, 12.2
  REMOVE_SCHEMA_POLICY procedure, 9.3, 9.5.3
  REMOVE_TABLE_POLICY procedure, 9.3, 9.4.2
  REPADMIN account, 12.6.1.1, 12.6.3.1, 12.6.3.2
  replication
    materialized views (snapshots), 12.6.1.1, 12.6.3.2, 12.6.4
    with Oracle Label Security, 12.6, 12.6.1.2
  RESTORE_DEFAULT_LABELS procedure, 4.6.1, 4.6.4
  restrictions, Oracle Label Security, C.2
  row label
    default, 4.6.3
  row labels
    changing compartments, 7.2.4
    default, 3.3.1.2, 3.3.1.3, 3.3.2, 4.6.1, 10.4.2.2, D.2
    example, 3.2.3
    in distributed environment, 12.3
    inserting, 4.5.1
    LABEL_DEFAULT option, 4.5, 8.1.3.1
    privileges, 3.5.3
    restoring, 4.6.4
    saving defaults, 4.6.5
    setting, 4.6.3, 10.4.2.2
    setting compartments, 7.2.2
    setting groups, 7.2.3
    setting levels, 7.2.1
    understanding, 3.2.2
    updating, 3.5.3
    viewing, 10.4.1.2
  ROW_LABEL function, 4.6.6.2

## S

  SA_COMPONENTS package, 6.5
  SA_POLICY_ADMIN, 9
  SA_POLICY_ADMIN package, 9
  SA_SESSION functions
    defined, 4.6.1
    viewing security attributes, 4.6.6.2
  SA_SYSDBA package, 6.4
  SA_USER_ADMIN package
    administering stored program units, 10.2
    overview, 7.1
  SA_USER_NAME function, 4.6.6.2, 7.6
  SA_UTL package
    dominance functions, A.1.3.5
    overview, 10.4
  SAVE_DEFAULT_LABELS procedure, 4.6.1, 4.6.5
  schemas
    applying policies to, 6.1.4, 6.4.5, 8.1.6
    default policy options, 6.4.4
    restrictions on shared, C.2.5
  security
    introduction, 1.1
    standards, 1.1.1
  security evaluations
    EAL4, 1.1.1
  security policies
    introduction, 1.1.2
    VPD, 1.3.3
  session labels
    changing, 4.6.2
    computed, 3.3.2
    distributed database, 12.3
    example, 3.2.3
    OCI interface, A.2
    restoring, 4.6.4
    SA_UTL.SET_LABEL, 10.4.2.1
    saving defaults, 4.6.5
    setting compartments, 7.2.2
    setting groups, 7.2.3
    setting levels, 7.2.1
    understanding, 3.2.1
    viewing, 10.4.1.1
  SET_ACCESS_PROFILE function, C.2.5
  SET_ACCESS_PROFILE procedure, 7.5, 7.6
  SET_COMPARTMENTS procedure, 7.2.2
  SET_DEFAULT_LABEL function, 7.3.2
    inverse groups, 14.7.1
  SET_DEFAULT_LABEL procedure
    inverse groups, 14.8.7
  SET_GROUPS procedure, 7.2.3
    inverse groups, 14.8.5
  SET_LABEL function
    and RESTORE_DEFAULT_LABELS, 4.6.4
    definition, 4.6.1, 4.6.6.2, 4.6.6.2
    inverse groups, 14.7.2
    on remote database, 12.3
    SA_UTL.SET_LABEL, 10.4.2.1
    using, 4.6.2
  SET_LABEL procedure
    inverse groups, 14.8.11
  SET_LEVELS procedure, 7.2.1
  SET_PROG_PRIVS function, 10.2, 10.2, 10.2
  SET_ROW_LABEL function
    inverse groups, 14.7.1, 14.7.2
  SET_ROW_LABEL procedure, 4.6.1, 4.6.3, 7.3.3, 10.4.2.2, 14.7.2.1, 14.7.2.2
    inverse groups, 14.8.8, 14.8.12
  SET_USER_LABELS procedure, 7.3.1
    inverse groups, 14.8.6
  SET_USER_PRIVS function, 7.4
  shared schema restrictions, C.2.5
  SQL*Loader, 13.3
  STRICTLY_DOMINATED_BY function, A.1.3, A.1.3.4, A.1.3.8
  STRICTLY_DOMINATES function, A.1.3, A.1.3.2, A.1.3.6
  SYS account
    policy enforcement, 8.1.7
  SYS_CONTEXT
    and labeling functions, 8.2.2
    variables, A.2
  SYSDBA privilege, 11.2
  system privileges, 1.1.3.3, 3.5.4, 3.5.5, 3.5.6

## T

  tasks, overview, 6.1
  TO_DATA_LABEL function, 4.5.5, 6.1.3, 6.6.1
  TO_LBAC_DATA_LABEL function, 8.2.2
  triggers, 8.2.2
  trusted stored program units
    creating, 10.3.1
    error handling, 10.3.5
    example, 10.1.2
    executing, 10.3.5
    introduction, 10.1
    privileges, 3.5.6, 10.3.5
    re-compiling, 10.3.3
    replacing, 10.3.4

## U

  UPDATE_CONTROL option, 8.1.1, 8.1.1, 8.4.2
  updating labeled data, 8.4
  user authorizations
    compartments, 3.3.1.2
    groups, 3.3.1.3
    levels, 3.3.1.1
    understanding, 3.3
  USER_SA_SESSION view, 4.6.6.1

## V

  views
    access mediation, 3.5.5
    ALL_SA_AUDIT_OPTIONS, C.1.2.1
    ALL_SA_COMPARTMENTS, C.1.2.2
    ALL_SA_GROUPS, C.1.2.4
    ALL_SA_LABELS, C.1.2.3, C.1.2.5
    ALL_SA_LEVELS, C.1.2.6
    ALL_SA_POLICIES, C.1.2.7
    ALL_SA_PROG_PRIVS, C.1.2.8
    ALL_SA_SCHEMA_POLICIES, C.1.2.9
    ALL_SA_TABLE_POLICIES, C.1.2.10
    ALL_SA_USER_LABELS, C.1.2.12
    ALL_SA_USER_LEVELS, C.1.2.13
    ALL_SA_USER_PRIVS, C.1.2.14
    ALL_SA_USERS, C.1.2.11
    auditing, C.1.3
    DBA_policyname_AUDIT_TRAIL, C.1.3
    DBA_SA_AUDIT_OPTIONS, 11.3.4, C.1.2.15, C.1.3
    DBA_SA_COMPARTMENTS, C.1.2.16
    DBA_SA_DATA_LABELS, C.1.2.17
    DBA_SA_GROUP_HIERARCHY, C.1.2.19
    DBA_SA_GROUPS, C.1.2.18
    DBA_SA_LABELS, C.1.2.20
    DBA_SA_LEVELS, C.1.2.21
    DBA_SA_POLICIES, C.1.2.22
    DBA_SA_PROG_PRIVS, C.1.2.23
    DBA_SA_SCHEMA_POLICIES, 8.1.8, C.1.2.24
    DBA_SA_TABLE_POLICIES, 8.1.8, C.1.2.25
    DBA_SA_USER_COMPARTMENTS, C.1.2.27
    DBA_SA_USER_GROUPS, C.1.2.28
    DBA_SA_USER_LABELS, C.1.2.29
    DBA_SA_USER_LEVELS, C.1.2.30
    DBA_SA_USER_PRIVS, C.1.2.31
    DBA_SA_USERS, C.1.2.26
    USER_SA_SESSION, 4.6.6.1
  virtual private database (VPD)
    policies, 1.3.2

## W

  write access
    algorithm, 3.4.3, 3.5.2.2
    introduction, 3.4.1
  write label, 3.3.2
  WRITE_CONTROL option
    algorithm, 3.4.3
    definition, 8.1.1, 8.1.1
    introduction, 8.1.4.2
    LABEL_UPDATE, 8.1.4.2
    with INSERT, UPDATE, DELETE, 8.1.4.2
    with other options, 8.1.6
  WRITEACROSS privilege, 3.5.1, 3.5.3, 3.5.3.3, 8.1.1, 8.1.3.2, 8.4.2
  WRITEDOWN privilege, 3.5.1, 3.5.3, 3.5.3.2, 3.5.6, 8.1.1, 8.1.3.2, 8.4.2
  WRITEUP privilege, 3.5.1, 3.5.3, 3.5.3.1