As a tester
I would like to automate the testing of my RAS Policies using utPLSQL
So that my application becomes (and remains) secure
Real Application Security (RAS) is like VPD on steroids.
It supports stateless application like APEX. The ease of swapping sessions, at the pl/sql level, makes it ease to proxy different users and, thus, automating testing.
Adding RAS support to utPLSQL would simplify automated security policy testing.
Suggested tags:
| tag |
scope |
DBMS_XS_SESSIONS procedure |
| RASUser |
both |
create_session( username => $username, ... is_external => false ) |
| RASExternalUser |
both |
create_session( username => $username, ... is_external => true ) |
| RASRoles |
both |
attach_session( ... enable_dynamic_roles => role_list ... ) |
| RASExternalRoles |
both |
attach_session( ... external_roles => role_list ... ) |
| RASDisableRoles |
Procedure |
attach_session( ... disable_dynamic_roles => role_list ... ) |
| RASNamespace |
Package |
create_session( ... namespaces => namespace_list ... ) |
| --- |
implied afterall |
loop destroy_session( session_id, false ) |
I've got a test suite working for RAS, but would need a template for oddgen to easily build a test suite
As a tester
I would like to automate the testing of my RAS Policies using utPLSQL
So that my application becomes (and remains) secure
Real Application Security (RAS) is like VPD on steroids.
It supports stateless application like APEX. The ease of swapping sessions, at the pl/sql level, makes it ease to proxy different users and, thus, automating testing.
Adding RAS support to utPLSQL would simplify automated security policy testing.
Suggested tags:
I've got a test suite working for RAS, but would need a template for oddgen to easily build a test suite