René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Support for Real Application Security (RAS) Sessions","articleBody":"As a tester\r\nI would like to automate the testing of my RAS Policies using utPLSQL\r\nSo that my application becomes (and remains) secure\r\n\r\nReal Application Security (RAS) is like VPD on steroids.\r\n\r\nIt supports stateless application like APEX.  The ease of swapping sessions, at the pl/sql level, makes it ease to proxy different users and, thus, automating testing.\r\n\r\nAdding RAS support to utPLSQL would simplify automated security policy testing.\r\n\r\nSuggested tags:\r\n\r\ntag | scope | DBMS_XS_SESSIONS procedure\r\n---|-----|----\r\nRASUser | both | create_session( username =\u003e $username, ... is_external =\u003e false )\r\nRASExternalUser | both | create_session( username =\u003e $username, ... is_external =\u003e true )\r\nRASRoles | both | attach_session( ... enable_dynamic_roles =\u003e role_list ... )\r\nRASExternalRoles | both | attach_session( ... external_roles =\u003e role_list ... )\r\nRASDisableRoles | Procedure | attach_session( ... disable_dynamic_roles =\u003e role_list ... )\r\nRASNamespace | Package | create_session( ... namespaces =\u003e namespace_list ... )\r\n---  | implied afterall | loop destroy_session( session_id, false )\r\n\r\nI've got a test suite working for RAS, but would need a template for oddgen to easily build a test suite\r\n","author":{"url":"https://github.com/MikeKutz","@type":"Person","name":"MikeKutz"},"datePublished":"2023-06-20T13:32:38.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":5},"url":"https://github.com/1258/utPLSQL/issues/1258"}