...
Because the procedures do not change, it was determined that a permanently installed Oracle package which contained the needed procedures would be the most efficient way accomplish the task. Execution rights to the package would be given to a KFS account created specifically to manage the roles. The KFS administrator would then use the account to execute an Oracle PL/SQL script which utilizes the package. In this way the KFS administrator would be in control of when the user role updates were made, rather than creating Jira tickets and scripts for the DBA group to retrieve and execute.
Oracle kfs_kim_role_maint Package
The Oracle package kfs_kim_role_maint was created to manage the addition and removal of user roles is named from a department. The package definition along with the procedure definitions are shown below:
| Code Block |
|---|
CREATE OR REPLACE PACKAGE kfs_kim_role_maint AS -- spec PROCEDURE add_dta_role_member( PrincipalName IN VARCHAR2, HomeDepartmentCode IN VARCHAR2 ); PROCEDURE remove_dta_role_member( PrincipalName IN VARCHAR2, HomeDepartmentCode IN VARCHAR2, EndDate IN DATE DEFAULT SYSDATE ); END kfs_kim_role_maint; |