Introduction to 12c New Features for developers
Inside
12c New Features OEM - Enterprise Manager Oracle 12c new
features Oracle 12c New Features Programming Language Support
Oracle 12c PL/SQL New Features
Oracle SQL optimizer (CBO) Improvements
Oracle 12c SQL New Features
OEM Oracle 12c new features
Introduction to OEM 12c
Oracle 12c PL/SQL New Features
12c Performance Tuning Features
New
Performance Tuning Features Inside Extended
Optimizer Statistics
RAC
enhancements
RAC Transaction guard - evolution of TAF
Core Database Enhancements in Oracle12c
Interval-REF partitioning identity columns (automatic PK
generation) VARCHAR2(32767) for LOB's (up from VARCHAR(4000) ILM clause -
Integrated lifecycle Management 12c Transaction Guard Pluggable
Database Real-time ADDM ASH Analytics
SQL Management
SQL Commonality Index
Adaptive
execution plans
Hybrid Histograms
WITH clause enhancement to allow functions
Booleans in SQL
Improved
optimizer statistics
Oracle 12c security enhancements
- A PL/SQL unit can have roles granted
to it. -
Allowing SQL creation and management of wallets, rather than command line
utilities. Allows easier remote management.
- Code-Based Access Control (CBAC):
- Data Redaction: A variation in column
masking of VPD, but it doesn’t just blank the value and still allows queries
against the column in the WHERE clause.
- Doesn’t affect compile time, so focusing
very much on dynamic SQL.
- Encryption Enhancements:
- Enhanced Security of Audit Trail:
- Export and import wallets/keys between
pluggable databases.
- Extension of the audit management package.
- inherited rights : Control accidental
privilege escalation when a privileged user calls an invoker rights unit
containing malicious code.
- Invoker Rights management
- Invokers rights for views.
- Monitoring controlled using
dbms_privilege_capture.
- Multiple audit management privileges.
- New Separation of Duties:
- Privilege Analysis:
- Report what is used and what is not used.
- Roles for audit management.
- Single unified audit trail.
- Storage of wallets in ASM.
- SYSBACKUP – Just enough to do a backup.
- SYSDG – Just enough for data guard
administration.
- SYSKM – Just enough to perform basic key management tasks.
- SYSOPER – More limited than SYSDBA, but
still very powerful.
- Tracking direct privileges and privileges via roles
- Useful on invoker rights, since now the
PL/SQL can run with user privileges and explicitly granted roles for the unit.
- When the unit runs, any dynamic SQL
running can have the privileges granted via the role.
|