From 13686998914adaf000d4d0bdadfe908db238af74 Mon Sep 17 00:00:00 2001
From: devmrko <devmrko@gmail.com>
Date: Thu, 25 Jun 2026 12:58:52 +0900
Subject: [PATCH] [Developer] #424 filter VPD policies to protected objects

---
 src/main/resources/mapper/VpdPolicyMapper.xml | 64 +++++++++++--------
 .../resources/templates/vpd-policies.html     |  4 +-
 2 files changed, 41 insertions(+), 27 deletions(-)

diff --git a/src/main/resources/mapper/VpdPolicyMapper.xml b/src/main/resources/mapper/VpdPolicyMapper.xml
index 07b6a2d..0e49dfd 100644
--- a/src/main/resources/mapper/VpdPolicyMapper.xml
+++ b/src/main/resources/mapper/VpdPolicyMapper.xml
@@ -3,40 +3,54 @@
     "https://mybatis.org/dtd/mybatis-3-mapper.dtd">
 <mapper namespace="com.cloudhandson.vpdbackoffice.mapper.VpdPolicyMapper">
   <sql id="policyColumns">
-    object_owner,
-    object_name,
-    policy_group,
-    policy_name,
-    pf_owner AS function_owner,
-    package AS package_name,
-    function AS function_name,
+    ${alias}object_owner,
+    ${alias}object_name,
+    ${alias}policy_group,
+    ${alias}policy_name,
+    ${alias}pf_owner AS function_owner,
+    ${alias}package AS package_name,
+    ${alias}function AS function_name,
     RTRIM(
-      CASE WHEN sel = 'YES' THEN 'SELECT,' ELSE '' END ||
-      CASE WHEN ins = 'YES' THEN 'INSERT,' ELSE '' END ||
-      CASE WHEN upd = 'YES' THEN 'UPDATE,' ELSE '' END ||
-      CASE WHEN del = 'YES' THEN 'DELETE,' ELSE '' END ||
-      CASE WHEN idx = 'YES' THEN 'INDEX,' ELSE '' END,
+      CASE WHEN ${alias}sel = 'YES' THEN 'SELECT,' ELSE '' END ||
+      CASE WHEN ${alias}ins = 'YES' THEN 'INSERT,' ELSE '' END ||
+      CASE WHEN ${alias}upd = 'YES' THEN 'UPDATE,' ELSE '' END ||
+      CASE WHEN ${alias}del = 'YES' THEN 'DELETE,' ELSE '' END ||
+      CASE WHEN ${alias}idx = 'YES' THEN 'INDEX,' ELSE '' END,
       ','
     ) AS statement_types,
-    chk_option AS check_option,
-    enable AS enabled,
-    static_policy,
-    policy_type,
-    long_predicate
+    ${alias}chk_option AS check_option,
+    ${alias}enable AS enabled,
+    ${alias}static_policy,
+    ${alias}policy_type,
+    ${alias}long_predicate
   </sql>
 
   <select id="findPolicies" resultType="com.cloudhandson.vpdbackoffice.domain.vpd.VpdPolicyView">
-    SELECT <include refid="policyColumns"/>
-    FROM all_policies
-    ORDER BY object_owner, object_name, policy_name
+    SELECT <include refid="policyColumns"><property name="alias" value="p."/></include>
+    FROM all_policies p
+    WHERE EXISTS (
+      SELECT 1
+      FROM cb_protected_object o
+      WHERE o.enabled_yn = 'Y'
+        AND o.owner = p.object_owner
+        AND o.object_name = p.object_name
+    )
+    ORDER BY p.object_owner, p.object_name, p.policy_name
   </select>
 
   <select id="findPolicy" resultType="com.cloudhandson.vpdbackoffice.domain.vpd.VpdPolicyView">
-    SELECT <include refid="policyColumns"/>
-    FROM all_policies
-    WHERE object_owner = UPPER(#{objectOwner,jdbcType=VARCHAR})
-      AND object_name = UPPER(#{objectName,jdbcType=VARCHAR})
-      AND policy_name = UPPER(#{policyName,jdbcType=VARCHAR})
+    SELECT <include refid="policyColumns"><property name="alias" value="p."/></include>
+    FROM all_policies p
+    WHERE p.object_owner = UPPER(#{objectOwner,jdbcType=VARCHAR})
+      AND p.object_name = UPPER(#{objectName,jdbcType=VARCHAR})
+      AND p.policy_name = UPPER(#{policyName,jdbcType=VARCHAR})
+      AND EXISTS (
+        SELECT 1
+        FROM cb_protected_object o
+        WHERE o.enabled_yn = 'Y'
+          AND o.owner = p.object_owner
+          AND o.object_name = p.object_name
+      )
   </select>
 
   <select id="findFunctionSource" resultType="string">
diff --git a/src/main/resources/templates/vpd-policies.html b/src/main/resources/templates/vpd-policies.html
index 83b82bd..d65ef32 100644
--- a/src/main/resources/templates/vpd-policies.html
+++ b/src/main/resources/templates/vpd-policies.html
@@ -6,7 +6,7 @@
 <main class="container py-4">
   <div class="page-title">
     <h1>VPD 설정</h1>
-    <p>현재 계정에서 조회 가능한 Oracle VPD policy 설정을 확인합니다.</p>
+    <p>테이블/뷰 관리에 등록된 보호 객체에 적용된 Oracle VPD policy 설정을 확인합니다.</p>
   </div>
 
   <div class="alert alert-warning" th:if="${runtimeError}">
@@ -81,7 +81,7 @@
         </th:block>
         <tr th:if="${#lists.isEmpty(policies)}">
           <td colspan="7" class="text-muted">
-            조회 가능한 VPD policy가 없습니다. 정책이 없거나 현재 DB 계정에 dictionary 조회 권한이 없을 수 있습니다.
+            등록된 보호 객체에 적용된 VPD policy가 없습니다. 테이블/뷰 관리의 보호 객체 등록 상태와 DB policy 적용 상태를 확인하세요.
           </td>
         </tr>
         </tbody>