Re: database calls out to ineternet

From: Stefan Knecht <knecht.stefan_at_gmail.com>
Date: Thu, 3 May 2018 11:58:15 +0700
Message-ID: <CAP50yQ8YGRHofYL0D-kUdf3b9uKUApf2TVzPsQtcyurKVzMiTA_at_mail.gmail.com>



If you have full control over the environment (it sounds like you do) and security is the main focus, you can create something like this:

Pseudo code it would look like this:

create or replace procedure get_data
as
  output varchar2(1000);
begin
  execute immediate 'get_data_at_dblink(arg1, arg2,arg3,out)' using l_arg1, l_arg2, l_arg3, output;

  • process data received from web call end; /

With proper exception handling in place, this should be fairly secure. Your "local" procedure needs to handle the errors related to the database link, whereas your remote procedure should handle the exceptions that can occur during the call that goes out to the web.

Stefan

On Thu, May 3, 2018 at 4:57 AM, Jeff Chirco <backseatdba_at_gmail.com> wrote:

> We have a requirement to make a web service call out to the internet. We
> want to do this from within pl/sql. We've review the code to do that and
> that is no a problem. The problem is our security admin doesn't want it to
> our main database server to make the call and do the processing and is
> asking that we have a separate database a different server to make the call
> and do the processing of the return data. This seems overly complicated of
> a process because we have to call a diff database, processes it there and
> then it will need to send the results back. versus doing it all in one
> database.
> Anybody run into similar issue with your network team or how do you handle
> external calls? We are an private company and extermley private with our
> data
>
> Jeff
>

-- 
//
zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!
Visit us at zztat.net | _at_zztat_oracle | fb.me/zztat | zztat.net/blog/

--
http://www.freelists.org/webpage/oracle-l
Received on Thu May 03 2018 - 06:58:15 CEST

Original text of this message