1z0-060 New Features of Oracle Database 12c–Data Redaction

Without Redaction:

SQL> conn donghua/password       
SQL> create user hr_viewer identified by password;
SQL> grant create session to hr_viewer;
SQL> grant select on hr.employees to hr_viewer;
   
SQL> conn hr_viewer/password
Connected.
SQL>
SQL> select employee_id,salary,phone_number from hr.employees where employee_id in (107,108);

EMPLOYEE_ID     SALARY PHONE_NUMBER
----------- ---------- ------------------------------
        107       4200 590.423.5567
        108      12008 515.124.4569
 

Create policy on column hr.employees.phone_number   

SQL> conn donghua/password   
SQL> BEGIN
  2   DBMS_REDACT.ADD_POLICY(
  3     object_schema          => 'hr',
  4     object_name            => 'employees',
  5     column_name            => 'phone_number',
  6     policy_name            => 'redact_hr_employees',
  7     function_type          => DBMS_REDACT.REGEXP,
  8     function_parameters    => NULL,
  9     expression             => '1=1',
10     regexp_pattern         => '(\d\d\d).(\d\d)(\w+)',
11     regexp_replace_string  => 'XXX.XX\3',
12     regexp_position        => DBMS_REDACT.RE_BEGINNING,
13     regexp_occurrence      => DBMS_REDACT.RE_FIRST,
14     regexp_match_parameter => DBMS_REDACT.RE_CASE_INSENSITIVE,
15     policy_description     => 'Regular expressions to redact the first 5 digits of U.S. telephone numbers',
16     column_description     => 'phone_number contains employee actual phone number');
17  END;
18  /
 
SQL> conn hr_viewer/password

SQL> col phone_number for a20
SQL> select employee_id,salary,phone_number from hr.employees where employee_id in (107,108);

EMPLOYEE_ID     SALARY PHONE_NUMBER
----------- ---------- --------------------
        107       4200 XXX.XX3.5567
        108      12008 XXX.XX4.4569

Add additional column hr.employees.salary to the redaction column list

       
SQL> conn donghua/password   
SQL> BEGIN
  2   DBMS_REDACT.ALTER_POLICY(
  3     object_schema          => 'hr',
  4     object_name            => 'employees',
  5     policy_name            => 'redact_hr_employees',
  6     action                 => DBMS_REDACT.ADD_COLUMN,
  7     column_name            => 'salary',
  8     function_type          => DBMS_REDACT.RANDOM,
  9     policy_description     => 'Regular expressions to redact the first 5 digits of U.S. telephone numbers, and salary column',
10     column_description     => 'Salary information is sensitive');
11  END;
12  /

SQL> conn hr_viewer/password
Connected.
SQL>  col phone_number for a20
SQL> select employee_id,salary,phone_number from hr.employees where employee_id in (107,108);

EMPLOYEE_ID     SALARY PHONE_NUMBER
----------- ---------- --------------------
        107       1246 XXX.XX3.5567
        108       1336 XXX.XX4.4569

SQL> select employee_id,salary,phone_number from hr.employees where employee_id in (107,108);

EMPLOYEE_ID     SALARY PHONE_NUMBER
----------- ---------- --------------------
        107       3090 XXX.XX3.5567
        108       2514 XXX.XX4.4569

Schema owner without “exempt redaction policy” only see the redacted data

SQL> conn hr/password
Connected.
SQL> select employee_id,salary,phone_number from hr.employees where employee_id in (107,108);

EMPLOYEE_ID     SALARY PHONE_NUMBER
----------- ---------- --------------------
        107       1380 XXX.XX3.5567
        108      10640 XXX.XX4.4569

SQL> create table employees_bak as select * from employees;
create table employees_bak as select * from employees
                                     *
ERROR at line 1:
ORA-28081: Insufficient privileges - the command references a redacted object.

Query the dictionary

SQL> conn donghua/password   

SQL> select object_owner||','||object_name||','||policy_name||','||expression||','||enable||','||policy_description
  2  from redaction_policies;

OBJECT_OWNER||','||OBJECT_NAME||','||POLICY_NAME||','||EXPRESSION||','||ENABLE||
--------------------------------------------------------------------------------
HR,EMPLOYEES,redact_hr_employees,1=1,YES    ,Regular expressions to redact the f
irst 5 digits of U.S. telephone numbers
       

SQL> select object_owner||','||object_name||','||column_name||','||function_type||','||function_parameters||','||
  2  regexp_pattern||','||regexp_replace_string||','||regexp_position||','||regexp_occurrence||','
  3  ||regexp_match_parameter||','||column_description
  4  from redaction_columns;

OBJECT_OWNER||','||OBJECT_NAME||','||COLUMN_NAME||','||FUNCTION_TYPE||','||FUNCT
--------------------------------------------------------------------------------
HR,EMPLOYEES,PHONE_NUMBER,REGEXP REDACTION,,(\d\d\d).(\d\d)(\w+),XXX.XX\3,1,1,i,
phone_number contains employee actual phone number
HR,EMPLOYEES,SALARY,RANDOM REDACTION,,,,0,0,,

Working with “exempt redaction policy” privilege

SQL> grant exempt redaction policy to hr_viewer;

Grant succeeded.

SQL> conn hr_viewer/password
Connected.
SQL> col phone_number for a20
SQL> select employee_id,salary,phone_number from hr.employees where employee_id in (107,108);

EMPLOYEE_ID     SALARY PHONE_NUMBER
----------- ---------- --------------------
        107       4200 590.423.5567
        108      12008 515.124.4569

Disable and drop the policy

SQL> conn donghua/password       
           
SQL> BEGIN
  2   DBMS_REDACT.DISABLE_POLICY(
  3     object_schema          => 'hr',
  4     object_name            => 'employees',
  5     policy_name            => 'redact_hr_employees');
  6  END;
  7  /

PL/SQL procedure successfully completed.

SQL>
SQL> BEGIN
  2   DBMS_REDACT.DROP_POLICY(
  3     object_schema          => 'hr',
  4     object_name            => 'employees',
  5     policy_name            => 'redact_hr_employees');
  6  END;
  7  /

PL/SQL procedure successfully completed.

Step by Step screenshots for CDB Database DBUA upgrade from 12.1.0.1 to 12.1.0.2

 

SQL> show parameter db_recovery NAME TYPE VALUE ------------------------------------ ----------- ------------------------------ db_recovery_file_dest string /u01/app/oracle/fast_recovery_ area db_recovery_file_dest_size big integer 4800M SQL> alter system set db_recovery_file_dest_size=10G; System altered.

 

 

1z0-060 New Features of Oracle Database 12c - Privilege Analysis

Privilege Analysis requires "Oracle Database Vault" options to be licensed.

Step 1: Create user accounts "pa_admin" to perform privilege analysis

SQL> CREATE USER pa_admin IDENTIFIED BY password;
User created.
SQL> GRANT CREATE SESSION, CAPTURE_ADMIN TO pa_admin;
Grant succeeded.

Step 2: Create and enable a privilege analysis policy

2.1 Connect as user pa_admin.

oracle@s11:~$ sqlplus pa_admin/password@orcl

2.2 Create the following privilege analysis policy:

SQL> BEGIN
  2   DBMS_PRIVILEGE_CAPTURE.CREATE_CAPTURE(
  3    name             => 'dba_donghua_priv_analysis_pol',
  4    description      => 'Analyzes DBA (Donghua)''s privilege use',
  5    type             => DBMS_PRIVILEGE_CAPTURE.G_CONTEXT,
  6    condition        => 'SYS_CONTEXT(''USERENV'', ''SESSION_USER'')=''DONGHUA''');
  7  END;
  8  /
PL/SQL procedure successfully completed.

2.3 Enable the policy.

SQL> EXEC DBMS_PRIVILEGE_CAPTURE.ENABLE_CAPTURE ('dba_donghua_priv_analysis_pol');
PL/SQL procedure successfully completed.
SQL> col name for a30
SQL>  select name, enabled from dba_priv_captures;
NAME                           E
------------------------------ -
dba_donghua_priv_analysis_pol  Y

Step 3: Run some dummy workload to simulate activities as user "Donghua"

oracle@s11:~$ sqlplus donghua/${PASSWORD}@orcl
SQL> select count (*) from v$session;
SQL> select count(*) from dba_objects where status='INVALID';
SQL> select max(employee_id) from hr.employees;
SQL> create table t20140728 as select * from dba_tables;
SQL> explain plan for select * from t20140728;

Step 4: Disable the privilege analysis policy

4.1 Connect as user pa_admin.

oracle@s11:~$ sqlplus pa_admin/password@orcl

4.2 Disable the dba_donghua_priv_analysis_pol privilege policy.

SQL> EXEC DBMS_PRIVILEGE_CAPTURE.DISABLE_CAPTURE ('dba_donghua_priv_analysis_pol');
PL/SQL procedure successfully completed.
SQL> col name for a30
SQL> select name, enabled from dba_priv_captures;
NAME                           E
------------------------------ -
dba_donghua_priv_analysis_pol  N

Step 5: Generate and view privilege analysis reports

5.1 As user pa_admin, generate the privilege analysis results.

SQL> EXEC DBMS_PRIVILEGE_CAPTURE.GENERATE_RESULT ('dba_donghua_priv_analysis_pol');
PL/SQL procedure successfully completed.

5.2 Find the system privileges and roles that user "Donghua" used during the privilege analysis period.

SQL> col username format a8
SQL> col sys_priv format a18
SQL> col used_role format a20
SQL> col path format a150
SQL> col obj_priv format a10
SQL> col object_owner format a10
SQL> col object_name format a10
SQL> col object_type format a10
SQL> SELECT USERNAME, SYS_PRIV,  USED_ROLE,  PATH
  2  FROM DBA_USED_SYSPRIVS_PATH
  3  WHERE USERNAME = 'DONGHUA' ORDER BY 1, 2, 3;
USERNAME SYS_PRIV           USED_ROLE            PATH
-------- ------------------ -------------------- --------------------------------------------------------------------------------
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'EM_EXPRESS_ALL', 'EM_EXPRESS_BASIC')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_EXP_FULL_DATABASE')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE', 'IMP_FULL_DATABASE')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'IMP_FULL_DATABASE')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE', 'EXP_FULL_DATABASE')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_EXP_FULL_DATABASE', 'EXP_FULL_DATABASE')
DONGHUA  CREATE SESSION     EM_EXPRESS_BASIC     GRANT_PATH('DONGHUA', 'DBA', 'EXP_FULL_DATABASE')
DONGHUA  CREATE TABLE       DATAPUMP_EXP_FULL_DA GRANT_PATH('DONGHUA', 'DBA')
                            TABASE
DONGHUA  CREATE TABLE       DATAPUMP_EXP_FULL_DA GRANT_PATH('DONGHUA', 'DBA', 'EXP_FULL_DATABASE')
                            TABASE
DONGHUA  CREATE TABLE       DATAPUMP_EXP_FULL_DA GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_EXP_FULL_DATABASE', 'EXP_FULL_DATABASE')
                            TABASE
DONGHUA  CREATE TABLE       DATAPUMP_EXP_FULL_DA GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE', 'EXP_FULL_DATABASE')
                            TABASE
DONGHUA  CREATE TABLE       DATAPUMP_EXP_FULL_DA GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_EXP_FULL_DATABASE')
                            TABASE
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'OLAP_DBA')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE', 'IMP_FULL_DATABASE')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'IMP_FULL_DATABASE')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_IMP_FULL_DATABASE', 'EXP_FULL_DATABASE')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'DATAPUMP_EXP_FULL_DATABASE', 'EXP_FULL_DATABASE')
DONGHUA  SELECT ANY TABLE   OLAP_DBA             GRANT_PATH('DONGHUA', 'DBA', 'EXP_FULL_DATABASE')
DONGHUA  UNLIMITED TABLESPA DONGHUA              GRANT_PATH('DONGHUA')
         CE

5.3 Find the object privileges and roles that user "Donghua" used during the privilege analysis period.

SQL> col username format a9
SQL> col used_role format a20
SQL> col object_name format a22
SQL> col object_type format a12
SQL> SELECT USERNAME, OBJ_PRIV, USED_ROLE, OBJECT_OWNER, OBJECT_NAME, OBJECT_TYPE
  2  FROM DBA_USED_OBJPRIVS
  3  WHERE USERNAME = 'DONGHUA' ORDER BY 1, 2, 3, 4, 5, 6;

USERNAME  OBJ_PRIV   USED_ROLE            OBJECT_OWN OBJECT_NAME            OBJECT_TYPE
--------- ---------- -------------------- ---------- ---------------------- ------------
DONGHUA   EXECUTE    PUBLIC               SYS        DBMS_APPLICATION_INFO  PACKAGE
DONGHUA   EXECUTE    PUBLIC               SYS        DBMS_OUTPUT            PACKAGE
DONGHUA   INSERT     PUBLIC               SYS        PLAN_TABLE$            TABLE
DONGHUA   SELECT     PUBLIC               SYS        DUAL                   TABLE
DONGHUA   SELECT     PUBLIC               SYS        DUAL                   TABLE
DONGHUA   SELECT     PUBLIC               SYSTEM     PRODUCT_PRIVS          VIEW
DONGHUA   SELECT     SELECT_CATALOG_ROLE  SYS        DBA_OBJECTS            VIEW
DONGHUA   SELECT     SELECT_CATALOG_ROLE  SYS        DBA_TABLES             VIEW
DONGHUA   SELECT     SELECT_CATALOG_ROLE  SYS        V_$SESSION             VIEW
DONGHUA   USE        PUBLIC               SYS        ORA$BASE               EDITION
10 rows selected.

5.4 Find the unused system privileges for user "Donghua".

SQL> col username format a9
SQL> col sys_priv format a35
SQL> SELECT USERNAME, SYS_PRIV FROM DBA_UNUSED_SYSPRIVS WHERE USERNAME = 'DONGHUA' ORDER BY 1, 2;
USERNAME  SYS_PRIV
--------- -----------------------------------
DONGHUA   ADMINISTER ANY SQL TUNING SET
DONGHUA   ADMINISTER ANY SQL TUNING SET
DONGHUA   ADMINISTER DATABASE TRIGGER
DONGHUA   ADMINISTER DATABASE TRIGGER
DONGHUA   ADMINISTER RESOURCE MANAGER
DONGHUA   ADMINISTER RESOURCE MANAGER
DONGHUA   ADMINISTER SQL MANAGEMENT OBJECT
DONGHUA   ADMINISTER SQL MANAGEMENT OBJECT
DONGHUA   ADMINISTER SQL TUNING SET
DONGHUA   ADMINISTER SQL TUNING SET
DONGHUA   ADVISOR
DONGHUA   ADVISOR
DONGHUA   ALTER ANY ASSEMBLY
DONGHUA   ALTER ANY CLUSTER
DONGHUA   ALTER ANY CUBE
DONGHUA   ALTER ANY CUBE BUILD PROCESS
DONGHUA   ALTER ANY CUBE DIMENSION
DONGHUA   ALTER ANY DIMENSION
DONGHUA   ALTER ANY EDITION
DONGHUA   ALTER ANY EVALUATION CONTEXT
DONGHUA   ALTER ANY INDEX
DONGHUA   ALTER ANY INDEXTYPE
DONGHUA   ALTER ANY LIBRARY
DONGHUA   ALTER ANY MATERIALIZED VIEW
DONGHUA   ALTER ANY MEASURE FOLDER
DONGHUA   ALTER ANY MINING MODEL
DONGHUA   ALTER ANY OPERATOR
DONGHUA   ALTER ANY OUTLINE
DONGHUA   ALTER ANY PROCEDURE
DONGHUA   ALTER ANY PROCEDURE
DONGHUA   ALTER ANY ROLE
DONGHUA   ALTER ANY ROLE
DONGHUA   ALTER ANY RULE
DONGHUA   ALTER ANY RULE SET
DONGHUA   ALTER ANY SEQUENCE
DONGHUA   ALTER ANY SQL PROFILE
DONGHUA   ALTER ANY SQL TRANSLATION PROFILE
DONGHUA   ALTER ANY TABLE
DONGHUA   ALTER ANY TABLE
DONGHUA   ALTER ANY TRIGGER
DONGHUA   ALTER ANY TRIGGER
DONGHUA   ALTER ANY TYPE
DONGHUA   ALTER ANY TYPE
DONGHUA   ALTER DATABASE
DONGHUA   ALTER DATABASE
DONGHUA   ALTER PROFILE
DONGHUA   ALTER PROFILE
DONGHUA   ALTER RESOURCE COST
DONGHUA   ALTER RESOURCE COST
DONGHUA   ALTER ROLLBACK SEGMENT
DONGHUA   ALTER SESSION
DONGHUA   ALTER SYSTEM
DONGHUA   ALTER SYSTEM
DONGHUA   ALTER TABLESPACE
DONGHUA   ALTER TABLESPACE
DONGHUA   ALTER USER
DONGHUA   ALTER USER
DONGHUA   ANALYZE ANY
DONGHUA   ANALYZE ANY
DONGHUA   ANALYZE ANY DICTIONARY
DONGHUA   AUDIT ANY
DONGHUA   AUDIT ANY
DONGHUA   AUDIT SYSTEM
DONGHUA   AUDIT SYSTEM
DONGHUA   BACKUP ANY TABLE
DONGHUA   BACKUP ANY TABLE
DONGHUA   BECOME USER
DONGHUA   BECOME USER
DONGHUA   CHANGE NOTIFICATION
DONGHUA   COMMENT ANY MINING MODEL
DONGHUA   COMMENT ANY TABLE
DONGHUA   COMMENT ANY TABLE
DONGHUA   CREATE ANY ASSEMBLY
DONGHUA   CREATE ANY CLUSTER
DONGHUA   CREATE ANY CLUSTER
DONGHUA   CREATE ANY CONTEXT
DONGHUA   CREATE ANY CONTEXT
DONGHUA   CREATE ANY CREDENTIAL
DONGHUA   CREATE ANY CUBE
DONGHUA   CREATE ANY CUBE
DONGHUA   CREATE ANY CUBE BUILD PROCESS
DONGHUA   CREATE ANY CUBE BUILD PROCESS
DONGHUA   CREATE ANY CUBE DIMENSION
DONGHUA   CREATE ANY CUBE DIMENSION
DONGHUA   CREATE ANY DIMENSION
DONGHUA   CREATE ANY DIMENSION
DONGHUA   CREATE ANY DIRECTORY
DONGHUA   CREATE ANY DIRECTORY
DONGHUA   CREATE ANY EDITION
DONGHUA   CREATE ANY EVALUATION CONTEXT
DONGHUA   CREATE ANY INDEX
DONGHUA   CREATE ANY INDEX
DONGHUA   CREATE ANY INDEXTYPE
DONGHUA   CREATE ANY INDEXTYPE
DONGHUA   CREATE ANY JOB
DONGHUA   CREATE ANY LIBRARY
DONGHUA   CREATE ANY LIBRARY
DONGHUA   CREATE ANY MATERIALIZED VIEW
DONGHUA   CREATE ANY MATERIALIZED VIEW
DONGHUA   CREATE ANY MEASURE FOLDER
DONGHUA   CREATE ANY MEASURE FOLDER
DONGHUA   CREATE ANY MINING MODEL
DONGHUA   CREATE ANY OPERATOR
DONGHUA   CREATE ANY OPERATOR
DONGHUA   CREATE ANY OUTLINE
DONGHUA   CREATE ANY PROCEDURE
DONGHUA   CREATE ANY PROCEDURE
DONGHUA   CREATE ANY RULE
DONGHUA   CREATE ANY RULE SET
DONGHUA   CREATE ANY SEQUENCE
DONGHUA   CREATE ANY SEQUENCE
DONGHUA   CREATE ANY SQL PROFILE
DONGHUA   CREATE ANY SQL PROFILE
DONGHUA   CREATE ANY SQL TRANSLATION PROFILE
DONGHUA   CREATE ANY SYNONYM
DONGHUA   CREATE ANY SYNONYM
DONGHUA   CREATE ANY TABLE
DONGHUA   CREATE ANY TABLE
DONGHUA   CREATE ANY TRIGGER
DONGHUA   CREATE ANY TRIGGER
DONGHUA   CREATE ANY TYPE
DONGHUA   CREATE ANY TYPE
DONGHUA   CREATE ANY VIEW
DONGHUA   CREATE ANY VIEW
DONGHUA   CREATE ASSEMBLY
DONGHUA   CREATE CLUSTER
DONGHUA   CREATE CREDENTIAL
DONGHUA   CREATE CUBE
DONGHUA   CREATE CUBE BUILD PROCESS
DONGHUA   CREATE CUBE DIMENSION
DONGHUA   CREATE DATABASE LINK
DONGHUA   CREATE DATABASE LINK
DONGHUA   CREATE DIMENSION
DONGHUA   CREATE EVALUATION CONTEXT
DONGHUA   CREATE EXTERNAL JOB
DONGHUA   CREATE INDEXTYPE
DONGHUA   CREATE JOB
DONGHUA   CREATE JOB
DONGHUA   CREATE LIBRARY
DONGHUA   CREATE MATERIALIZED VIEW
DONGHUA   CREATE MEASURE FOLDER
DONGHUA   CREATE MINING MODEL
DONGHUA   CREATE OPERATOR
DONGHUA   CREATE PLUGGABLE DATABASE
DONGHUA   CREATE PROCEDURE
DONGHUA   CREATE PROFILE
DONGHUA   CREATE PROFILE
DONGHUA   CREATE PUBLIC DATABASE LINK
DONGHUA   CREATE PUBLIC DATABASE LINK
DONGHUA   CREATE PUBLIC SYNONYM
DONGHUA   CREATE PUBLIC SYNONYM
DONGHUA   CREATE ROLE
DONGHUA   CREATE ROLE
DONGHUA   CREATE ROLLBACK SEGMENT
DONGHUA   CREATE ROLLBACK SEGMENT
DONGHUA   CREATE RULE
DONGHUA   CREATE RULE SET
DONGHUA   CREATE SEQUENCE
DONGHUA   CREATE SEQUENCE
DONGHUA   CREATE SQL TRANSLATION PROFILE
DONGHUA   CREATE SYNONYM
DONGHUA   CREATE TABLESPACE
DONGHUA   CREATE TABLESPACE
DONGHUA   CREATE TRIGGER
DONGHUA   CREATE TYPE
DONGHUA   CREATE USER
DONGHUA   CREATE USER
DONGHUA   CREATE VIEW
DONGHUA   DEBUG ANY PROCEDURE
DONGHUA   DEBUG CONNECT SESSION
DONGHUA   DELETE ANY CUBE DIMENSION
DONGHUA   DELETE ANY CUBE DIMENSION
DONGHUA   DELETE ANY MEASURE FOLDER
DONGHUA   DELETE ANY MEASURE FOLDER
DONGHUA   DELETE ANY TABLE
DONGHUA   DELETE ANY TABLE
DONGHUA   DEQUEUE ANY QUEUE
DONGHUA   DROP ANY ASSEMBLY
DONGHUA   DROP ANY CLUSTER
DONGHUA   DROP ANY CLUSTER
DONGHUA   DROP ANY CONTEXT
DONGHUA   DROP ANY CONTEXT
DONGHUA   DROP ANY CUBE
DONGHUA   DROP ANY CUBE
DONGHUA   DROP ANY CUBE BUILD PROCESS
DONGHUA   DROP ANY CUBE BUILD PROCESS
DONGHUA   DROP ANY CUBE DIMENSION
DONGHUA   DROP ANY CUBE DIMENSION
DONGHUA   DROP ANY DIMENSION
DONGHUA   DROP ANY DIMENSION
DONGHUA   DROP ANY DIRECTORY
DONGHUA   DROP ANY DIRECTORY
DONGHUA   DROP ANY EDITION
DONGHUA   DROP ANY EVALUATION CONTEXT
DONGHUA   DROP ANY INDEX
DONGHUA   DROP ANY INDEX
DONGHUA   DROP ANY INDEXTYPE
DONGHUA   DROP ANY INDEXTYPE
DONGHUA   DROP ANY LIBRARY
DONGHUA   DROP ANY LIBRARY
DONGHUA   DROP ANY MATERIALIZED VIEW
DONGHUA   DROP ANY MATERIALIZED VIEW
DONGHUA   DROP ANY MEASURE FOLDER
DONGHUA   DROP ANY MEASURE FOLDER
DONGHUA   DROP ANY MINING MODEL
DONGHUA   DROP ANY OPERATOR
DONGHUA   DROP ANY OPERATOR
DONGHUA   DROP ANY OUTLINE
DONGHUA   DROP ANY OUTLINE
DONGHUA   DROP ANY PROCEDURE
DONGHUA   DROP ANY PROCEDURE
DONGHUA   DROP ANY ROLE
DONGHUA   DROP ANY ROLE
DONGHUA   DROP ANY RULE
DONGHUA   DROP ANY RULE SET
DONGHUA   DROP ANY SEQUENCE
DONGHUA   DROP ANY SEQUENCE
DONGHUA   DROP ANY SQL PROFILE
DONGHUA   DROP ANY SQL PROFILE
DONGHUA   DROP ANY SQL TRANSLATION PROFILE
DONGHUA   DROP ANY SYNONYM
DONGHUA   DROP ANY SYNONYM
DONGHUA   DROP ANY TABLE
DONGHUA   DROP ANY TABLE
DONGHUA   DROP ANY TRIGGER
DONGHUA   DROP ANY TRIGGER
DONGHUA   DROP ANY TYPE
DONGHUA   DROP ANY TYPE
DONGHUA   DROP ANY VIEW
DONGHUA   DROP ANY VIEW
DONGHUA   DROP PROFILE
DONGHUA   DROP PROFILE
DONGHUA   DROP PUBLIC DATABASE LINK
DONGHUA   DROP PUBLIC DATABASE LINK
DONGHUA   DROP PUBLIC SYNONYM
DONGHUA   DROP PUBLIC SYNONYM
DONGHUA   DROP ROLLBACK SEGMENT
DONGHUA   DROP ROLLBACK SEGMENT
DONGHUA   DROP TABLESPACE
DONGHUA   DROP TABLESPACE
DONGHUA   DROP USER
DONGHUA   DROP USER
DONGHUA   EM EXPRESS CONNECT
DONGHUA   EM EXPRESS CONNECT
DONGHUA   ENQUEUE ANY QUEUE
DONGHUA   EXECUTE ANY ASSEMBLY
DONGHUA   EXECUTE ANY CLASS
DONGHUA   EXECUTE ANY EVALUATION CONTEXT
DONGHUA   EXECUTE ANY INDEXTYPE
DONGHUA   EXECUTE ANY LIBRARY
DONGHUA   EXECUTE ANY OPERATOR
DONGHUA   EXECUTE ANY OPERATOR
DONGHUA   EXECUTE ANY PROCEDURE
DONGHUA   EXECUTE ANY PROCEDURE
DONGHUA   EXECUTE ANY PROGRAM
DONGHUA   EXECUTE ANY RULE
DONGHUA   EXECUTE ANY RULE SET
DONGHUA   EXECUTE ANY TYPE
DONGHUA   EXECUTE ANY TYPE
DONGHUA   EXECUTE ASSEMBLY
DONGHUA   EXEMPT DDL REDACTION POLICY
DONGHUA   EXEMPT DML REDACTION POLICY
DONGHUA   EXEMPT REDACTION POLICY
DONGHUA   EXPORT FULL DATABASE
DONGHUA   FLASHBACK ANY TABLE
DONGHUA   FLASHBACK ARCHIVE ADMINISTER
DONGHUA   FORCE ANY TRANSACTION
DONGHUA   FORCE TRANSACTION
DONGHUA   GLOBAL QUERY REWRITE
DONGHUA   GLOBAL QUERY REWRITE
DONGHUA   GRANT ANY OBJECT PRIVILEGE
DONGHUA   GRANT ANY OBJECT PRIVILEGE
DONGHUA   GRANT ANY PRIVILEGE
DONGHUA   GRANT ANY PRIVILEGE
DONGHUA   GRANT ANY ROLE
DONGHUA   GRANT ANY ROLE
DONGHUA   IMPORT FULL DATABASE
DONGHUA   INSERT ANY CUBE DIMENSION
DONGHUA   INSERT ANY CUBE DIMENSION
DONGHUA   INSERT ANY MEASURE FOLDER
DONGHUA   INSERT ANY MEASURE FOLDER
DONGHUA   INSERT ANY TABLE
DONGHUA   INSERT ANY TABLE
DONGHUA   LOCK ANY TABLE
DONGHUA   LOGMINING
DONGHUA   MANAGE ANY FILE GROUP
DONGHUA   MANAGE ANY QUEUE
DONGHUA   MANAGE ANY QUEUE
DONGHUA   MANAGE FILE GROUP
DONGHUA   MANAGE SCHEDULER
DONGHUA   MANAGE TABLESPACE
DONGHUA   MERGE ANY VIEW
DONGHUA   ON COMMIT REFRESH
DONGHUA   QUERY REWRITE
DONGHUA   READ ANY FILE GROUP
DONGHUA   READ ANY FILE GROUP
DONGHUA   REDEFINE ANY TABLE
DONGHUA   RESTRICTED SESSION
DONGHUA   RESUMABLE
DONGHUA   RESUMABLE
DONGHUA   SELECT ANY CUBE
DONGHUA   SELECT ANY CUBE
DONGHUA   SELECT ANY CUBE BUILD PROCESS
DONGHUA   SELECT ANY CUBE DIMENSION
DONGHUA   SELECT ANY CUBE DIMENSION
DONGHUA   SELECT ANY DICTIONARY
DONGHUA   SELECT ANY MEASURE FOLDER
DONGHUA   SELECT ANY MINING MODEL
DONGHUA   SELECT ANY SEQUENCE
DONGHUA   SELECT ANY SEQUENCE
DONGHUA   SELECT ANY TRANSACTION
DONGHUA   SET CONTAINER
DONGHUA   UNDER ANY TABLE
DONGHUA   UNDER ANY TYPE
DONGHUA   UNDER ANY VIEW
DONGHUA   UPDATE ANY CUBE
DONGHUA   UPDATE ANY CUBE
DONGHUA   UPDATE ANY CUBE BUILD PROCESS
DONGHUA   UPDATE ANY CUBE BUILD PROCESS
DONGHUA   UPDATE ANY CUBE DIMENSION
DONGHUA   UPDATE ANY CUBE DIMENSION
DONGHUA   UPDATE ANY TABLE
DONGHUA   UPDATE ANY TABLE
DONGHUA   USE ANY SQL TRANSLATION PROFILE
324 rows selected.

Step 6: Remove the components for this example

6.1 As user pa_admin, drop the dba_donghua_priv_analysis_pol privilege analysis policy.

SQL> EXEC DBMS_PRIVILEGE_CAPTURE.DROP_CAPTURE ('dba_donghua_priv_analysis_pol');
PL/SQL procedure successfully completed.

6.2 Drop the user pa_admin (connect user donghua)

SQL> DROP USER pa_admin;
User dropped.

Step by Step Screenshots upgrading 12.1.0.1 to 12.1.0.2

oracle@solaris:/u01/stage/database$ export ORACLE_HOME=/u01/app/oracle/product/12.1.0.2/dbhome_1

oracle@solaris:/u01/stage/database$ export PATH=/u01/app/oracle/product/12.1.0.2/dbhome_1/bin:/usr/bin:/usr/sbin:/usr/local/bin

oracle@solaris:/u01/stage/database$ which dbua

/u01/app/oracle/product/12.1.0.2/dbhome_1/bin/dbua

oracle@solaris:/u01/stage/database$ dbua

Step by Step screenshots for 12.1.0.2 Installation (12c Release 1 Patchset 1)