{"id":160,"date":"2026-04-11T12:00:00","date_gmt":"2026-04-11T10:00:00","guid":{"rendered":"https:\/\/blog.agdba.de\/?p=160"},"modified":"2026-04-13T07:40:21","modified_gmt":"2026-04-13T05:40:21","slug":"oracle-sql-firewall-pl-sql-package","status":"publish","type":"post","link":"https:\/\/blog.agdba.de\/?p=160","title":{"rendered":"SQL-Firewall mittels PL\/SQL-Package und Datasafe"},"content":{"rendered":"\n

Ab der Version 23ai ist die SQL Firewall Teil des Oracle Kernels. Die Firewall kann \u00fcber das PL\/SQL-Package DBMS_SQL_FIREWALL administriert werden. Dieser Artikel soll die Einrichtung und die Funktionsweise aufzeigen.<\/p>\n\n\n\n\n\n\n\n

Einrichtung<\/h2>\n\n\n\n

Aktivieren der SQL Firewall in der PDB (als sys oder priviligierter User):<\/p>\n\n\n\n

SQL> exec dbms_sql_firewall.enable;\n\nPL\/SQL procedure successfully completed.\n\nSQL> set lines 300\nSQL> select * from dba_sql_firewall_status;\n\nSTATUS\t STATUS_UPDATED_ON\t\t\t\t\t\t\t     EXCLUDE_JOBS\n-------- --------------------------------------------------------------------------- ------------\nENABLED  10-APR-26 11.30.39.795661 AM +00:00\t\t\t\t\t     Y\n<\/code><\/pre>\n\n\n\n
Starten des Captures Prozesses zum erfassen des Workloads:<\/p>\n\n\n\n
SQL> BEGIN\n    DBMS_SQL_FIREWALL.CREATE_CAPTURE (\n      username => 'APP',\n      top_level_only => TRUE,\n      start_capture => FALSE );\nEND;\n\/\n  2    3    4    5    6    7  \nPL\/SQL procedure successfully completed.\n\n\nSQL> select username, top_level_only, status from dba_sql_firewall_captures where username='APP';\n\nUSERNAME     TOP_LEVEL_ONLY STATUS\n------------ -------------- --------\nAPP\t     Y\t\t    DISABLED\n<\/code><\/pre>\n\n\n\n
Das Capture muss jetzt noch gestartet werden, da start_capture auf False gesetzt wurde:<\/p>\n\n\n\n
SQL> exec dbms_sql_firewall.start_capture ('APP');\n\nPL\/SQL procedure successfully completed.\n\nSQL> select username, top_level_only, status from dba_sql_firewall_captures where username='APP';\nSQL> \nUSERNAME     TOP_LEVEL_ONLY STATUS\n------------ -------------- --------\nAPP\t     N\t\t    ENABLED<\/code><\/pre>\n\n\n\n
Jetzt kann der Workload ausgef\u00fchrt werden, der sp\u00e4ter die Grundlage f\u00fcr die sp\u00e4tere Allow List sein soll.<\/p>\n\n\n\n
Daf\u00fcr f\u00fchren wir einige SQL als Benutzer APP in der PDB aus.<\/p>\n\n\n\n
Stoppen des Capture Prozesses:<\/p>\n\n\n\n
SQL> exec dbms_sql_firewall.stop_capture('APP');\n\nPL\/SQL procedure successfully completed.<\/code><\/pre>\n\n\n\n
In folgenden Views sind die erfassten SQLs und die Session Kontexte einzusehen:<\/p>\n\n\n\n
--session logs (context)\nSQL> select username, ip_address, client_program, os_user\nfrom dba_sql_firewall_session_logs\nwhere username = 'APP' order by login_time;  2    3  \n\nUSERNAME     IP_ADDRESS      CLIENT_PROGRAM OS_USER\n------------ --------------- -------------- --------------------\nAPP\t     10.0.0.215      sqlplus@dbfire oracle\n\t\t\t     wall (TNS V1-V\n\t\t\t     3)\n\n\n\n--capture logs (SQLs)\nSQL> SQL> select command_type, sql_text, accessed_objects from dba_sql_firewall_capture_logs;\n\nCOMMAND_TYPE\tSQL_TEXT\t\t\t\t\t   ACCESSED_OBJECTS\n--------------- -------------------------------------------------- --------------------\nSELECT\t\tSELECT SUM (PREIS) FROM BESTELLUNGEN WHERE KUNDENN \"APP\".\"BESTELLUNGEN\"\n\t\tR=:\"SYS_B_0\"\n\nEXECUTE \tBEGIN BESTELLSUM (?); END;\t\t\t   \"APP\".\"BESTELLSUM\"\nSELECT\t\tSELECT COUNT (*) FROM BESTELLUNGEN WHERE KUNDENNR= \"APP\".\"BESTELLUNGEN\"\n\t\t:\"SYS_B_0\"\n\nSELECT\t\tSELECT KUNDENNR,ARTIKEL,PREIS,MENGE FROM BESTELLUN \"APP\".\"BESTELLUNGEN\"\n\t\tGEN WHERE KUNDENNR=:\"SYS_B_0\"\n<\/code><\/pre>\n\n\n\n
Hier sind die SQL-Muster zu sehen, die erfasst wurden.<\/p>\n\n\n\n
Aus diesen Ergebnissen kann dann die Allowlist generiert werden:<\/p>\n\n\n\n
SQL> exec dbms_sql_firewall.generate_allow_list('APP');\n\nPL\/SQL procedure successfully completed.\n\n-- view allow list\nSQL> select username, status, top_level_only from dba_sql_firewall_allow_lists where username='APP';\n\nUSERNAME     STATUS   TOP_LEVEL_ONLY\n------------ -------- --------------\nAPP\t     DISABLED N\n\n-- view allowed SQLs\nSQL> select username, current_user, top_level, sql_text, accessed_objects from dba_sql_firewall_allowed_sql where username='APP' order by sql_text, current_user, top_level;\n\nUSERNAME     CURRENT_USER TOP_LEVEL SQL_TEXT\t\t\t\t\t       ACCESSED_OBJECTS\n------------ ------------ --------- -------------------------------------------------- --------------------\nAPP\t     APP\t  Y\t    BEGIN BESTELLSUM (?); END;\t\t\t       \"APP\".\"BESTELLSUM\"\nAPP\t     APP\t  Y\t    SELECT COUNT (*) FROM BESTELLUNGEN WHERE KUNDENNR= \"APP\".\"BESTELLUNGEN\"\n\t\t\t\t    :\"SYS_B_0\"\n\nAPP\t     APP\t  Y\t    SELECT KUNDENNR,ARTIKEL,PREIS,MENGE FROM BESTELLUN \"APP\".\"BESTELLUNGEN\"\n\t\t\t\t    GEN WHERE KUNDENNR=:\"SYS_B_0\"\n\nAPP\t     APP\t  N\t    SELECT SUM (PREIS) FROM BESTELLUNGEN WHERE KUNDENN \"APP\".\"BESTELLUNGEN\"\n\t\t\t\t    R=:\"SYS_B_0\"\n\n\n-- view allowed contexts\nSQL> select username, ip_address from sys.dba_sql_firewall_allowed_ip_addr where username='APP';\n\nUSERNAME     IP_ADDRESS\n------------ ---------------\nAPP\t     10.0.0.215\n\nSQL> select username, os_user from sys.dba_sql_firewall_allowed_os_user where username='APP';\n\nUSERNAME     OS_USER\n------------ --------------------\nAPP\t     oracle\n\nSQL> select username, os_program from sys.dba_sql_firewall_allowed_os_prog where username='APP';\n\nUSERNAME     OS_PROGRAM\n------------ --------------------------------------------------------------------------------------------------------------------------------\nAPP\t     sqlplus@dbfirewall (TNS V1-V3)<\/code><\/pre>\n\n\n\n
Aktivieren der Allowlist:<\/p>\n\n\n\n
SQL> BEGIN\n  DBMS_SQL_FIREWALL.ENABLE_ALLOW_LIST (\n    username       => 'APP',\n    enforce        => DBMS_SQL_FIREWALL.ENFORCE_SQL,\n    block          => TRUE\n  );\nEND;\n\/  2    3    4    5    6    7    8  \n\nPL\/SQL procedure successfully completed.<\/code><\/pre>\n\n\n\n
Hierbei k\u00f6nnen verschiedenen Parameter verwendet werden:<\/p>\n\n\n\n
enforce =><\/p>\n\n\n\n
    \n
  • ENFORCE_ALL  –> default, SQLs und Kontext werden angewendet<\/li>\n\n\n\n
  • ENFORCW_SQL –> nur SQLs werden angewendet<\/li>\n\n\n\n
  • ENFORCE_CONTEXT –> nur Session Kontext wird angewendet<\/li>\n<\/ul>\n\n\n\n
    block =><\/p>\n\n\n\n
      \n
    • false –> default, Violations werden nicht geblockt, nur protokolliert (View DBA_SQL_FIREWALL_VIOLATIONS).<\/li>\n\n\n\n
    • true –> Violations werden geblockt und protokolliert (View DBA_SQL_FIREWALL_VIOLATIONS).<\/li>\n<\/ul>\n\n\n\n
      \u00c4ndern des Block-Modus f\u00fcr die Allow-List:<\/p>\n\n\n\n
      exec dbms_sql_firewall.update_allow_list_enforcement('APP', block=>FALSE);<\/code><\/pre>\n\n\n\n
      Anpassungen der Allowlist k\u00f6nnen jederzeit gemacht werden.<\/p>\n\n\n\n
      --hinzuf\u00fcgen eines erlaubten OS Benutzers\nBEGIN\n  DBMS_SQL_FIREWALL.ADD_ALLOWED_CONTEXT (\n    username       => 'APP',\n    context_type   => DBMS_SQL_FIREWALL.OS_USERNAME,\n    value          => 'opc'\n   );\nEND;\n\/\n\n--entfernen eines erlaubten OS Benutzers\nBEGIN\n  DBMS_SQL_FIREWALL.DELETE_ALLOWED_CONTEXT (\n    username       => 'APP',\n    context_type   => DBMS_SQL_FIREWALL.OS_USERNAME,\n    value          => 'opc'\n   );\nEND;\n\/\n\n--entfernen einer erlaubten IP Adresse:\nBEGIN\n  DBMS_SQL_FIREWALL.DELETE_ALLOWED_CONTEXT (\n    username       => 'APP',\n    context_type   => DBMS_SQL_FIREWALL.IP_Address,\n    value          => '192.168.1.70'\n   );\nEND;\n\/\n\n--entfernen eines erlaubten Programms\nBEGIN\n  DBMS_SQL_FIREWALL.DELETE_ALLOWED_CONTEXT (\n    username       => 'APP',\n    context_type   => DBMS_SQL_FIREWALL.OS_PROGRAM,\n    value          => 'sqlplus.exe'\n   );\nEND;\n\/<\/code><\/pre>\n\n\n\n
      Testen der Funktion<\/h2>\n\n\n\n
      Um die Funktion zu testen, werden verschiedene SQL Statements ausgef\u00fchrt.<\/p>\n\n\n\n
      SQL mit identischer where Bedingung:<\/p>\n\n\n\n
      SQL> select count(*) from bestellungen where kundennr='123456';\n\n  COUNT(*)\n----------\n\t 3\n<\/code><\/pre>\n\n\n\n
      SQL mit ge\u00e4nderter where-Bedingung:<\/p>\n\n\n\n
      \nSQL> select count(*) from bestellungen;\nselect count(*) from bestellungen\n                     *\nERROR at line 1:\nORA-47605: SQL Firewall violation\nHelp: https:\/\/docs.oracle.com\/error-help\/db\/ora-47605\/<\/code><\/pre>\n\n\n\n
      SQL mit ge\u00e4nderter Spaltenwahl (urspr\u00fcnglich: „select kundennr, artikel, preis, menge from bestellungen where kundennr=’123456′;“:<\/p>\n\n\n\n
      SQL> select preis, menge from bestellungen where kundennr='123456';\nselect preis, menge from bestellungen where kundennr='123456'\n                         *\nERROR at line 1:\nORA-47605: SQL Firewall violation\nHelp: https:\/\/docs.oracle.com\/error-help\/db\/ora-47605\/\n\nSQL> select preis, menge ,kundennr, artikel from bestellungen where kundennr='123456';\nselect preis, menge ,kundennr, artikel from bestellungen where kundennr='123456'\n                                            *\nERROR at line 1:\nORA-47605: SQL Firewall violation\nHelp: https:\/\/docs.oracle.com\/error-help\/db\/ora-47605\/<\/code><\/pre>\n\n\n\n
      Mit der SQL Firewall kann somit die Sicherheit von sensiblen Daten erh\u00f6ht werden. Die SQL Firewall sch\u00fctzt haupts\u00e4chlich vor missbrauch von priviligierten Benutzern und SQL-Injections, da unbekannte SQL Muster oder Quellen der Verbindung blockiert werden, bevor die SQLs in der Datenbank ausgef\u00fchrt werden.<\/p>\n\n\n\n
      Nutzung in der OCI Datasafe<\/h2>\n\n\n\n
      In der OCI kann im Datasafe die SQL-Firewall grafisch bedient und administriert werden. Dabei k\u00f6nnen Ziele in der OCI und auch onPrem von Datasafe administriert werden. <\/p>\n\n\n\n
      Nachfolgend einige Bilder f\u00fcr die adminsitration der SQL-Firewall mittels Datasafe:<\/p>\n\n\n\n
      Anzeige der Kontextinformationen und erlaubten SQLs:<\/p>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      Ebenfalls zu sehen sind hier die Administrationsm\u00f6glichkeiten wie z.B. L\u00f6schen von SQLs aus der Allowed_list oder „Add from violations“ womit man auf Violations reagieren kann, die ungewollt entstehen. Die Allow_Lists f\u00fcr SQL und Kontext sind somit flexibel modifizierbar.<\/p>\n\n\n\n
      Dashboard f\u00fcr SQL-Firewall mit \u00fcbersicht \u00fcber Anzahl der violations, SQL-Firewall rules und SQL Collections:<\/p>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      Details der SQL-Violations:<\/p>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
      Im Datasafe in der OCI k\u00f6nnen aus diesen Ansichten auch Reports geneiert werden. Datasafe erm\u00f6glicht zudem auch die Nutzung von Notifications im Falle von Firewall violoations.<\/p>\n\n\n\n
      <\/p>\n\n\n\n
      <\/p>\n","protected":false},"excerpt":{"rendered":"
      Ab der Version 23ai ist die SQL Firewall Teil des Oracle Kernels. Die Firewall kann \u00fcber das PL\/SQL-Package DBMS_SQL_FIREWALL administriert werden. Dieser Artikel soll die Einrichtung und die Funktionsweise aufzeigen.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,13,15,14],"tags":[23,24,30,29,19,27,28,26,25],"class_list":["post-160","post","type-post","status-publish","format-standard","hentry","category-allgemein","category-database","category-oci","category-security","tag-23ai","tag-26ai","tag-datasafe","tag-dbms_sql_firewall","tag-oci","tag-oracle-database","tag-pl-sql-package","tag-security","tag-sql-firewall"],"yoast_head":"\nSQL-Firewall mittels PL\/SQL-Package und Datasafe - agdba.de<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.agdba.de\/?p=160\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL-Firewall mittels PL\/SQL-Package und Datasafe - agdba.de\" \/>\n<meta property=\"og:description\" content=\"Ab der Version 23ai ist die SQL Firewall Teil des Oracle Kernels. Die Firewall kann \u00fcber das PL\/SQL-Package DBMS_SQL_FIREWALL administriert werden. Dieser Artikel soll die Einrichtung und die Funktionsweise aufzeigen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.agdba.de\/?p=160\" \/>\n<meta property=\"og:site_name\" content=\"agdba.de\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-11T10:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-13T05:40:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.agdba.de\/wp-content\/uploads\/2025\/12\/Bild3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1519\" \/>\n\t<meta property=\"og:image:height\" content=\"726\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Alexander Giesbrecht\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alexander Giesbrecht\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"6\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160\"},\"author\":{\"name\":\"Alexander Giesbrecht\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/#\\\/schema\\\/person\\\/c9b8806180cd864945b5950d3dec5798\"},\"headline\":\"SQL-Firewall mittels PL\\\/SQL-Package und Datasafe\",\"datePublished\":\"2026-04-11T10:00:00+00:00\",\"dateModified\":\"2026-04-13T05:40:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160\"},\"wordCount\":453,\"image\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog.agdba.de\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Bild3-1024x489.png\",\"keywords\":[\"23ai\",\"26ai\",\"Datasafe\",\"DBMS_SQL_FIREWALL\",\"OCI\",\"Oracle Database\",\"PL\\\/SQL-Package\",\"Security\",\"SQL Firewall\"],\"articleSection\":{\"1\":\"Database\",\"2\":\"OCI\",\"3\":\"Security\"},\"inLanguage\":\"de\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160\",\"url\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160\",\"name\":\"SQL-Firewall mittels PL\\\/SQL-Package und Datasafe - agdba.de\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog.agdba.de\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Bild3-1024x489.png\",\"datePublished\":\"2026-04-11T10:00:00+00:00\",\"dateModified\":\"2026-04-13T05:40:21+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/#\\\/schema\\\/person\\\/c9b8806180cd864945b5950d3dec5798\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.agdba.de\\\/?p=160\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#primaryimage\",\"url\":\"https:\\\/\\\/blog.agdba.de\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Bild3.png\",\"contentUrl\":\"https:\\\/\\\/blog.agdba.de\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Bild3.png\",\"width\":1519,\"height\":726},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/?p=160#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Start\",\"item\":\"https:\\\/\\\/blog.agdba.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL-Firewall mittels PL\\\/SQL-Package und Datasafe\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/#website\",\"url\":\"https:\\\/\\\/blog.agdba.de\\\/\",\"name\":\"agdba.de\",\"description\":\"Oracle Database, OCI and more\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.agdba.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.agdba.de\\\/#\\\/schema\\\/person\\\/c9b8806180cd864945b5950d3dec5798\",\"name\":\"Alexander Giesbrecht\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b0f7a24a2ab62199afeb3704ba03108c4a0b796d431d9342635095c0d1861e3b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b0f7a24a2ab62199afeb3704ba03108c4a0b796d431d9342635095c0d1861e3b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b0f7a24a2ab62199afeb3704ba03108c4a0b796d431d9342635095c0d1861e3b?s=96&d=mm&r=g\",\"caption\":\"Alexander Giesbrecht\"},\"url\":\"https:\\\/\\\/blog.agdba.de\\\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL-Firewall mittels PL\/SQL-Package und Datasafe - agdba.de","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.agdba.de\/?p=160","og_locale":"de_DE","og_type":"article","og_title":"SQL-Firewall mittels PL\/SQL-Package und Datasafe - agdba.de","og_description":"Ab der Version 23ai ist die SQL Firewall Teil des Oracle Kernels. Die Firewall kann \u00fcber das PL\/SQL-Package DBMS_SQL_FIREWALL administriert werden. Dieser Artikel soll die Einrichtung und die Funktionsweise aufzeigen.","og_url":"https:\/\/blog.agdba.de\/?p=160","og_site_name":"agdba.de","article_published_time":"2026-04-11T10:00:00+00:00","article_modified_time":"2026-04-13T05:40:21+00:00","og_image":[{"width":1519,"height":726,"url":"https:\/\/blog.agdba.de\/wp-content\/uploads\/2025\/12\/Bild3.png","type":"image\/png"}],"author":"Alexander Giesbrecht","twitter_card":"summary_large_image","twitter_misc":{"Verfasst von":"Alexander Giesbrecht","Gesch\u00e4tzte Lesezeit":"6\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.agdba.de\/?p=160#article","isPartOf":{"@id":"https:\/\/blog.agdba.de\/?p=160"},"author":{"name":"Alexander Giesbrecht","@id":"https:\/\/blog.agdba.de\/#\/schema\/person\/c9b8806180cd864945b5950d3dec5798"},"headline":"SQL-Firewall mittels PL\/SQL-Package und Datasafe","datePublished":"2026-04-11T10:00:00+00:00","dateModified":"2026-04-13T05:40:21+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.agdba.de\/?p=160"},"wordCount":453,"image":{"@id":"https:\/\/blog.agdba.de\/?p=160#primaryimage"},"thumbnailUrl":"https:\/\/blog.agdba.de\/wp-content\/uploads\/2025\/12\/Bild3-1024x489.png","keywords":["23ai","26ai","Datasafe","DBMS_SQL_FIREWALL","OCI","Oracle Database","PL\/SQL-Package","Security","SQL Firewall"],"articleSection":{"1":"Database","2":"OCI","3":"Security"},"inLanguage":"de"},{"@type":"WebPage","@id":"https:\/\/blog.agdba.de\/?p=160","url":"https:\/\/blog.agdba.de\/?p=160","name":"SQL-Firewall mittels PL\/SQL-Package und Datasafe - agdba.de","isPartOf":{"@id":"https:\/\/blog.agdba.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.agdba.de\/?p=160#primaryimage"},"image":{"@id":"https:\/\/blog.agdba.de\/?p=160#primaryimage"},"thumbnailUrl":"https:\/\/blog.agdba.de\/wp-content\/uploads\/2025\/12\/Bild3-1024x489.png","datePublished":"2026-04-11T10:00:00+00:00","dateModified":"2026-04-13T05:40:21+00:00","author":{"@id":"https:\/\/blog.agdba.de\/#\/schema\/person\/c9b8806180cd864945b5950d3dec5798"},"breadcrumb":{"@id":"https:\/\/blog.agdba.de\/?p=160#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.agdba.de\/?p=160"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/blog.agdba.de\/?p=160#primaryimage","url":"https:\/\/blog.agdba.de\/wp-content\/uploads\/2025\/12\/Bild3.png","contentUrl":"https:\/\/blog.agdba.de\/wp-content\/uploads\/2025\/12\/Bild3.png","width":1519,"height":726},{"@type":"BreadcrumbList","@id":"https:\/\/blog.agdba.de\/?p=160#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Start","item":"https:\/\/blog.agdba.de\/"},{"@type":"ListItem","position":2,"name":"SQL-Firewall mittels PL\/SQL-Package und Datasafe"}]},{"@type":"WebSite","@id":"https:\/\/blog.agdba.de\/#website","url":"https:\/\/blog.agdba.de\/","name":"agdba.de","description":"Oracle Database, OCI and more","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.agdba.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Person","@id":"https:\/\/blog.agdba.de\/#\/schema\/person\/c9b8806180cd864945b5950d3dec5798","name":"Alexander Giesbrecht","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/b0f7a24a2ab62199afeb3704ba03108c4a0b796d431d9342635095c0d1861e3b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b0f7a24a2ab62199afeb3704ba03108c4a0b796d431d9342635095c0d1861e3b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b0f7a24a2ab62199afeb3704ba03108c4a0b796d431d9342635095c0d1861e3b?s=96&d=mm&r=g","caption":"Alexander Giesbrecht"},"url":"https:\/\/blog.agdba.de\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/blog.agdba.de\/index.php?rest_route=\/wp\/v2\/posts\/160","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.agdba.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.agdba.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.agdba.de\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.agdba.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=160"}],"version-history":[{"count":18,"href":"https:\/\/blog.agdba.de\/index.php?rest_route=\/wp\/v2\/posts\/160\/revisions"}],"predecessor-version":[{"id":263,"href":"https:\/\/blog.agdba.de\/index.php?rest_route=\/wp\/v2\/posts\/160\/revisions\/263"}],"wp:attachment":[{"href":"https:\/\/blog.agdba.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.agdba.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.agdba.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}