1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
<?xml version="1.0" encoding="ISO-8859-1"?>
<!--
-
- This file is part of the OpenLink Software Virtuoso Open-Source (VOS)
- project.
-
- Copyright (C) 1998-2018 OpenLink Software
-
- This project is free software; you can redistribute it and/or modify it
- under the terms of the GNU General Public License as published by the
- Free Software Foundation; only version 2 of the License, dated June 1991.
-
- This program is distributed in the hope that it will be useful, but
- WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
- General Public License for more details.
-
- You should have received a copy of the GNU General Public License along
- with this program; if not, write to the Free Software Foundation, Inc.,
- 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
-
-
-->
<refentry id="fn_rdf_graph_security_audit">
<refmeta>
<refentrytitle>DB.DBA.RDF_GRAPH_SECURITY_AUDIT</refentrytitle>
<refmiscinfo>rdf</refmiscinfo>
</refmeta>
<refnamediv>
<refname>DB.DBA.RDF_GRAPH_SECURITY_AUDIT</refname>
<refpurpose>Fix graph-level security errors.</refpurpose>
</refnamediv>
<refsynopsisdiv>
<funcsynopsis id="fsyn_rdf_graph_security_audit">
<funcprototype id="fproto_rdf_graph_security_audit">
<funcdef><function>DB.DBA.RDF_GRAPH_SECURITY_AUDIT</function></funcdef>
<paramdef><optional>in <parameter>recovery</parameter> integer</optional></paramdef>
</funcprototype>
</funcsynopsis>
</refsynopsisdiv>
<refsect1 id="desc_rdf_graph_security_audit"><title>Description</title>
<para>This function can detect and automatically fix many sorts of errors in the configuration
of the graph-level security.</para>
</refsect1>
<refsect1 id="params_rdf_graph_security_audit">
<title>Parameters</title>
<refsect2>
<title>recovery</title>
<para>(0|1 default 0) - 0 = read-only diagnostics ; 1 = diagnostics
+recovery, and makes a result-set of messages (such as found errors). The result set consists of 6 columns:
</para>
<orderedlist>
<listitem><emphasis>SEVERITY</emphasis> -- empty string for information messages, 'WARNING',
'ERROR' or 'FATAL' for found problems.
</listitem>
<listitem><emphasis>GRAPH_IID</emphasis> -- IRI_ID of a graph or graph group in question,
NULL if not applicable.
</listitem>
<listitem><emphasis>GRAPH_IRI</emphasis> -- IRI string of a graph or graph group in question,
NULL if not applicable OR if GRAPH_IID does not correspond to any IRI. If GRAPH_IID is NULL or
GRAPH_IID is #i0 (the value reserved for 'world graphs') or GRAPH_IID is #i8192 (the value reserved
for 'private graphs') then GRAPH_IRI is expected to be NULL, otherwise NULL value here indicates
some inconsistency.
</listitem>
<listitem><emphasis>USER_ID</emphasis> -- The numeric identifier of user in question, the value
from U_ID column of DB.DBA.SYS_USERS.
</listitem>
<listitem><emphasis>USER_NAME</emphasis> -- The string identifier of user in question, the value from U_NAME
column of DB.DBA.SYS_USERS. If USER_ID is not a NULL but USER_NAME is NULL then the graph-level
security data refer to a user that no longer exists so they are most probably "garbage" (or the
actual problem is that the user is erroneously deleted).
</listitem>
<listitem><emphasis>MESSAGE</emphasis> -- plain text of the message</listitem>
</orderedlist>
</refsect2>
</refsect1>
<refsect1 id="examples_rdf_graph_security_audit">
<title>Examples</title>
<example id="ex_rdf_graph_security_audit">
<title>Simple example</title>
<para>Automatically fix the corrupted metadata:</para>
<programlisting><![CDATA[
SQL> DB.DBA.RDF_GRAPH_SECURITY_AUDIT(1);
SEVERITY GRAPH_IID GRAPH_IRI USER_ID USER_NAME MESSAGE
VARCHAR VARCHAR VARCHAR INTEGER VARCHAR VARCHAR
_______________________________________________________________________________
NULL NULL NULL NULL Inspecting caches of IRI_IDs of IRIs mentioned in security data...
NULL NULL NULL NULL Inspecting completeness of IRI cache for graph groups...
NULL NULL NULL NULL Inspecting completeness of IRI cache for graph group members...
NULL NULL NULL NULL Check for mismatches between graph group IRIs and graph group IRI_IDs...
NULL NULL NULL NULL Inspecting caching of list of private graphs...
NULL NULL NULL NULL Inspecting permissions of users...
NULL NULL NULL NULL No errors found in RDF security
7 Rows. -- 16 msec.
]]></programlisting>
</example>
</refsect1>
<refsect1 id="seealso_rdf_graph_security_audit">
<title>See Also</title>
<para><link linkend="fn_audit_metadata"><function>DB.DBA.RDF_AUDIT_METADATA</function></link></para>
<para><link linkend="fn_rdf_default_user_perms_set"><function>DB.DBA.RDF_DEFAULT_USER_PERMS_SET</function></link></para>
<para><link linkend="fn_rdf_default_user_perms_del"><function>DB.DBA.RDF_DEFAULT_USER_PERMS_DEL</function></link></para>
<para><link linkend="fn_rdf_graph_user_perms_set"><function>DB.DBA.RDF_GRAPH_USER_PERMS_SET</function></link></para>
<para><link linkend="fn_rdf_graph_user_perms_del"><function>DB.DBA.RDF_GRAPH_USER_PERMS_DEL</function></link></para>
<para><link linkend="fn_rdf_all_user_perms_del"><function>DB.DBA.RDF_ALL_USER_PERMS_DEL</function></link></para>
<para><link linkend="fn_rdf_graph_group_create"><function>DB.DBA.RDF_GRAPH_GROUP_CREATE</function></link></para>
<para><link linkend="fn_rdf_graph_group_ins"><function>DB.DBA.RDF_GRAPH_GROUP_INS</function></link></para>
</refsect1>
</refentry>
|
