\nSQL> alter pluggable database PDB1 open;\nPluggable database altered.\nSQL> alter session set container=PDB1;\nSession altered.\nSQL> select name from v$datafile;\n \nNAME\n--------------------------------------------------------------------------------\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_system_d2od2o7b_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_sysaux_d2od2o7j_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_undotbs1_d2od2o7l_.dbf\n<\/code><\/pre>\nMy files have been created in the CREATE_FILE_DEST directory specified at PDB creation, and with an OMF structure.
\nSo maybe I don’t want to include the CDB name and the PDB name but only a mount point.<\/p>\n
If, as a local user, I try to create a datafile elsewhere I get an error:<\/p>\n
\nSQL> connect admin\/password@\/\/localhost\/pdb1.opcoct.oraclecloud.internal\nConnected.\nSQL> create tablespace APPDATA datafile '\/tmp\/appdata.dbf' size 5M;\ncreate tablespace APPDATA datafile '\/tmp\/appdata.dbf' size 5M\n*\nERROR at line 1:\nORA-65250: invalid path specified for file - \/tmp\/appdata.dbf\n<\/code><\/pre>\nThis is exactly what I wanted.<\/p>\n
Because I’m bound to this directory, I don’t need to give an absolute path:<\/p>\n
\nSQL> create tablespace APPDATA datafile 'appdata.dbf' size 5M;\n \nTablespace created.\n \nSQL> select name from v$datafile;\n \nNAME\n-------------------------------------------------------------------------------------------------------------\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_system_d2od2o7b_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_sysaux_d2od2o7j_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_undotbs1_d2od2o7l_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/appdata.dbf\n<\/code><\/pre>\nSo you don’t need to use OMF there. If the PDB administrator wants to name the datafiles, he can, as long as they stays under the create_file_dest directory. You can create a datafile in a sub-directory of create_file_dest but it needs to exist of course.<\/p>\n
db_create_file_dest<\/h3>\n
Here it just looks like OMF, so I check the db_create_file_dest parameter:<\/p>\n
\nSQL> show parameter file_dest\n \nNAME TYPE VALUE\n------------------------------------ ----------- ---------------------------------\ndb_create_file_dest string \/u02\/app\/oracle\/oradata\/CDB2\/PDB1\n<\/code><\/pre>\nand I try to change it (as local user):<\/p>\n
\nSQL> connect admin\/password@\/\/localhost\/pdb1.opcoct.oraclecloud.internal;\nConnected.\nSQL> alter system set db_create_file_dest='\/tmp';\nalter system set db_create_file_dest='\/tmp'\n*\nERROR at line 1:\nORA-32017: failure in updating SPFILE\nORA-01031: insufficient privileges\n \nSQL> alter session set db_create_file_dest='\/tmp';\nERROR:\nORA-02097: parameter cannot be modified because specified value is invalid\nORA-01031: insufficient privileges\n<\/code><\/pre>\nNo need to use lockdown profile here, it is verified at runtime that a local user cannot change it.<\/p>\n
If you are connected with a common user, here connected as sysdba, this is the way to change what has been specified at PDB creation time:<\/p>\n
\nSQL> show con_id\n \nCON_ID\n------------------------------\n3\n \nSQL> alter system set db_create_file_dest='\/tmp';\nSystem altered.\n \nSQL> create tablespace APP1;\nTablespace created.\n \nSQL> select name from v$datafile;\n \nNAME\n--------------------------------------------------------------------------------\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_system_d2od2o7b_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_sysaux_d2od2o7j_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_undotbs1_d2od2o7l_.dbf\n\/u02\/app\/oracle\/oradata\/CDB2\/PDB1\/appdata.dbf\n\/tmp\/CDB2\/415260E5D27B5D4BE0534E186A0A4CB8\/datafile\/o1_mf_app1_d2ohx5sp_.dbf\n<\/code><\/pre>\nBut…<\/h3>\n
The behavior when you create the PDB with the CREATE_FILE_DEST clause is different than when you create it without, and set db_create_file_dest later. In the second case, the restriction does not occur and a local DBA can create a datafile wherever he wants. <\/p>\n
So I wanted to check whether this attribute is shipped when plugging PDBs. When looking at the pdb_descr_file xml file I don’t see anything different except the parameter:<\/p>\n
\n <parameters>\n <parameter>processes=300\n <parameter>nls_language='AMERICAN'\n <parameter>nls_territory='AMERICA'\n <parameter>filesystemio_options='setall'\n <parameter>db_block_size=8192\n <parameter>encrypt_new_tablespaces='CLOUD_ONLY'\n <parameter>compatible='12.2.0'\n <parameter>db_files=250\n <parameter>open_cursors=300\n <parameter>sql92_security=TRUE\n <parameter>pga_aggregate_target=1775294400\n <parameter>sec_protocol_error_trace_action='LOG'\n <parameter>enable_pluggable_database=TRUE\n <spfile>*.db_create_file_dest='\/u02\/app\/oracle\/oradata\/CDB2\/PDB1'\n <\/parameters>\n<\/code><\/pre>\nSo I tried to unplug\/plug my PDB and the restriction is gone. So be careful.<\/p>\n
I’ve not find a documented way to check if restriction is enabled or not (except trying to create a file outside of db_create_file_dest). Please comment if you know.
\nHowever, it seems that that a flag in CONTAINER$ is unset when restriction is there:<\/p>\n
\nSQL> create pluggable database PDB1 admin user admin identified by password role=(DBA) create_file_dest='\/u02\/app\/oracle\/oradata\/CDB2\/PDB1';\nPluggable database created.\n \nSQL> select con_id#,flags,decode(bitand(flags, 2147483648), 2147483648, 'YES', 'NO') from container$;\n \n CON_ID# FLAGS DEC\n---------- ---------- ---\n 1 0 NO\n 2 3221487616 YES\n 3 1610874880 NO\n<\/code><\/pre>\nCreating the same PDB but without the create_file_dest clause has the same flag as ‘NO’<\/p>\n
\ncreate pluggable database PDB1 admin user admin identified by password role=(DBA);\nPluggable database created.\n \nSQL> select con_id#,flags,decode(bitand(flags, 2147483648), 2147483648, 'YES', 'NO') from container$;\n \n CON_ID# FLAGS DEC\n---------- ---------- ---\n 1 0 NO\n 2 3221487616 YES\n 3 1074003968 NO\n<\/code><\/pre>\nI suppose that it is stored elsewhere because those flags are set only once PDB is opened.<\/p>\n","protected":false},"excerpt":{"rendered":"
By Franck Pachot . Two years ago I filled an OTN idea to ‘Constrain PDB datafiles into specific directory’ and made it an enhancement request for 12c Release 2. When you provision a PDB, the PDB admin can create tablespaces and put datafiles anywhere in your system. Of course this is not acceptable in a […]<\/p>\n","protected":false},"author":27,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229],"tags":[656,64,209],"type_dbi":[],"class_list":["post-9314","post","type-post","status-publish","format-standard","hentry","category-database-administration-monitoring","tag-12-2","tag-multitenant","tag-oracle-12c"],"acf":[],"yoast_head":"\n
12cR2: CREATE_FILE_DEST for PDB isolation - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"12cR2: CREATE_FILE_DEST for PDB isolation\" \/>\n<meta property=\"og:description\" content=\"By Franck Pachot . Two years ago I filled an OTN idea to ‘Constrain PDB datafiles into specific directory’ and made it an enhancement request for 12c Release 2. When you provision a PDB, the PDB admin can create tablespaces and put datafiles anywhere in your system. Of course this is not acceptable in a […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2016-11-16T08:32:35+00:00\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"12cR2: CREATE_FILE_DEST for PDB isolation\",\"datePublished\":\"2016-11-16T08:32:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\"},\"wordCount\":475,\"commentCount\":0,\"keywords\":[\"12.2\",\"multitenant\",\"Oracle 12c\"],\"articleSection\":[\"Database Administration & Monitoring\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\",\"name\":\"12cR2: CREATE_FILE_DEST for PDB isolation - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2016-11-16T08:32:35+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"12cR2: CREATE_FILE_DEST for PDB isolation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"12cR2: CREATE_FILE_DEST for PDB isolation - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/","og_locale":"en_US","og_type":"article","og_title":"12cR2: CREATE_FILE_DEST for PDB isolation","og_description":"By Franck Pachot . Two years ago I filled an OTN idea to ‘Constrain PDB datafiles into specific directory’ and made it an enhancement request for 12c Release 2. When you provision a PDB, the PDB admin can create tablespaces and put datafiles anywhere in your system. Of course this is not acceptable in a […]","og_url":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/","og_site_name":"dbi Blog","article_published_time":"2016-11-16T08:32:35+00:00","author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"12cR2: CREATE_FILE_DEST for PDB isolation","datePublished":"2016-11-16T08:32:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/"},"wordCount":475,"commentCount":0,"keywords":["12.2","multitenant","Oracle 12c"],"articleSection":["Database Administration & Monitoring"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/","url":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/","name":"12cR2: CREATE_FILE_DEST for PDB isolation - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2016-11-16T08:32:35+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/12cr2-create_file_dest-for-pdb-isolation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"12cR2: CREATE_FILE_DEST for PDB isolation"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/9314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=9314"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/9314\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=9314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=9314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=9314"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=9314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}