RESTRICT_PERMISSION

The DBMS_JAVA.RESTRICT_PERMISSION clause is used to set Java permission restrictions for a specified user or role. Restrictive class permissions take precedence over granting class permissions.

Syntax

The RESTRICT_PERMISSION statement provides two overloaded forms. The second form returns the primary key of the record for which permissions are being set via the key output parameter.

DBMS_JAVA.RESTRICT_PERMISSION(IN grantee VARCHAR(65535), IN permission_type VARCHAR(65535), IN permission_name VARCHAR(65535), IN permission_action VARCHAR(65535));

DBMS_JAVA.RESTRICT_PERMISSION(IN grantee VARCHAR(65535), IN permission_type VARCHAR(65535), IN permission_name VARCHAR(65535), IN permission_action VARCHAR(65535), OUT key BIGINT);

Parameters

Usage instructions

• Before calling DBMS_JAVA.RESTRICT_PERMISSION, ensure that the tenant parameter ob_enable_java_udf is enabled. Otherwise, an unsupported error will be returned.
• Only the root user in MySQL-compatible mode can operate Java permissions. Other users will receive an error indicating insufficient permissions when calling them.
• Only system privilege types are supported. Non-system privilege types specified in the SCHEMA:TYPE format are not supported.
• For privileges not in the allowlist, only the root user of the sys tenant (root@sys) can perform operations.
• This operation is idempotent: if the target permission record already exists and is enabled, it will not be recreated; if it exists but is disabled, it will be re-enabled.