OceanBase logo

OceanBase

A unified distributed database ready for your transactional, analytical, and AI workloads.

DEPLOY YOUR WAY

OceanBase Cloud

The best way to deploy and scale OceanBase

OceanBase Enterprise

Run and manage OceanBase on your infra

TRY OPEN SOURCE

OceanBase Community Edition

The free, open-source distributed database

OceanBase seekdb

Open source AI native search database

Customer Stories

Real-world success stories from enterprises across diverse industries.

View All
BY USE CASES

Mission-Critical Transactions

Global & Multicloud Application

Elastic Scaling for Peak Traffic

Real-time Analytics

Active Geo-redundancy

Database Consolidation

Resources

Comprehensive knowledge hub for OceanBase.

Blog

Live Demos

Training & Certification

Documentation

Official technical guides, tutorials, API references, and manuals for all OceanBase products.

View All
PRODUCTS

OceanBase Cloud

OceanBase Database

Tools

Connectors and Middleware

QUICK START

OceanBase Cloud

OceanBase Database

BEST PRACTICES

Practical guides for utilizing OceanBase more effectively and conveniently

Company

Learn more about OceanBase – our company, partnerships, and trust and security initiatives.

About OceanBase

Partner

Trust Center

Contact Us

International - English
中国站 - 简体中文
日本 - 日本語
Sign In
Start on Cloud

A unified distributed database ready for your transactional, analytical, and AI workloads.

DEPLOY YOUR WAY

OceanBase Cloud

The best way to deploy and scale OceanBase

OceanBase Enterprise

Run and manage OceanBase on your infra

TRY OPEN SOURCE

OceanBase Community Edition

The free, open-source distributed database

OceanBase seekdb

Open source AI native search database

Customer Stories

Real-world success stories from enterprises across diverse industries.

View All
BY USE CASES

Mission-Critical Transactions

Global & Multicloud Application

Elastic Scaling for Peak Traffic

Real-time Analytics

Active Geo-redundancy

Database Consolidation

Comprehensive knowledge hub for OceanBase.

Blog

Live Demos

Training & Certification

Documentation

Official technical guides, tutorials, API references, and manuals for all OceanBase products.

View All
PRODUCTS
OceanBase CloudOceanBase Database
ToolsConnectors and Middleware
QUICK START
OceanBase CloudOceanBase Database
BEST PRACTICES

Practical guides for utilizing OceanBase more effectively and conveniently

Learn more about OceanBase – our company, partnerships, and trust and security initiatives.

About OceanBase

Partner

Trust Center

Contact Us

Start on Cloud
编组
All Products
    • Databases
    • iconOceanBase Database
    • iconOceanBase Cloud
    • iconOceanBase Tugraph
    • iconInteractive Tutorials
    • iconOceanBase Best Practices
    • Tools
    • iconOceanBase Cloud Platform
    • iconOceanBase Migration Service
    • iconOceanBase Developer Center
    • iconOceanBase Migration Assessment
    • iconOceanBase Admin Tool
    • iconOceanBase Loader and Dumper
    • iconOceanBase Deployer
    • iconKubernetes operator for OceanBase
    • iconOceanBase Diagnostic Tool
    • iconOceanBase Binlog Service
    • Connectors and Middleware
    • iconOceanBase Database Proxy
    • iconEmbedded SQL in C for OceanBase
    • iconOceanBase Call Interface
    • iconOceanBase Connector/C
    • iconOceanBase Connector/J
    • iconOceanBase Connector/ODBC
    • iconOceanBase Connector/NET
icon

OceanBase Developer Center

V4.2.0

  • Overview
    • What is ODC?
    • Features
    • Architecture
    • Limitations
    • User interface
  • Quick Start
    • Client ODC
      • Overview
      • Install Client ODC
      • Use Client ODC
    • Web ODC
      • Overview
      • Deploy Web ODC
      • Use Web ODC
  • Data Source Management
    • Create a data source
    • Data source and project collaboration
    • Database O&M
      • Session management
      • Global variable management
      • Recycle bin management
  • SQL Development
    • Edit and execute SQL statements
    • Compile and debug PL objects
    • Command-line window
    • Edit and export results
    • Analyze SQL statements
    • Data mocking
    • 700.database-objects
      • Table objects
        • Overview
        • Create a table
        • Table list
        • Manage table attributes
        • Manage table data
      • View objects
        • Overview
        • Create a view
        • Manage views
      • Function objects
        • Overview
        • Create a function
        • Manage functions
      • Stored procedure objects
        • Overview
        • Create a stored procedure
        • Manage stored procedures
      • Sequence objects
        • Overview
        • Create a sequence
        • Manage sequences
      • Package objects
        • Overview
        • Create a program package
        • Manage program packages
      • Trigger objects
        • Overview
        • Create a trigger
        • Manage triggers
      • Type objects
        • Overview
        • Create a type
        • Manage types
      • Synonym objects
        • Overview
        • Create a synonym
        • Manage synonyms
  • Import and Export
    • Import schema and data
    • Export schema and data
  • Database Change Management
    • User Permission Management
      • Users and roles
      • Automatic authorization
    • Collaborative project management
    • Risk levels, risk identification rules, and approval processes
    • SQL check specifications
    • Manage database changes
    • SQL window specification
    • Change lock-free structures
    • Synchronize shadow tables
  • Data Lifecycle Management
    • Archive data
    • Data cleanup
    • Manage partitions
    • SQL plan task
  • Data Desensitization and Auditing
    • Data desensitization
    • Operation audit
  • System Integration
    • SSO integration
    • Approval integration
    • SQL approval integration
  • Deployment Guide
    • Deployment overview
    • Preparations before deployment
    • Deploy a single ODC node
      • Deployment process
      • Load and run an ODC image
    • Deploy ODC in high availability mode
      • Deployment process
      • Load and run an ODC image
      • Deploy SSL certificate
      • Deploy the NGINX proxy
      • Configure certificate trust
    • Deployment verification
  • Upgrade Guide
    • Overview
    • Preparations before upgrade
    • Upgrade single-node ODC
      • Upgrade process
      • Stop ODC of the earlier version
      • Load and run an ODC image
    • Upgrade high-availability
      • Upgrade process
      • Stop ODC of the earlier version
      • Load and run an ODC image
      • Upgrade NGINX image
    • Upgrade verification
    • Rollback after upgrade failed
  • Troubleshooting
    • ODC troubleshooting process
    • Collect Message
      • View the runtime environment and version information
      • View web ODC logs
      • View client ODC logs
      • View end-to-end ODC-related logs
      • View ODC MetaDB data
      • Query the index status in OceanBase Database V4.x
      • Query the index status in OceanBase Database V1.4.x to V3.2.x
      • Collect JVM runtime information
      • Use tcpdump to capture packets
    • Common Troubleshooting
      • Deployment Upgrade
        • Web ODC cannot be accessed after startup
      • Database Connection
        • Access denied in a connection trial or test
        • Connection is refused in a connection trial or test
        • Connection times out
        • `Connection reset` is reported for a time-consuming statement
        • `socket write error` or `closed by server` is reported for a connection
      • SQL Execution
        • Disconnection during SQL execution
        • `Over tenant memory limits` is reported during SQL execution
        • `Unknown thread id` is returned during SQL execution
        • `timeout` errors returned during SQL execution
        • `OutOfMemoryError` is returned during SQL execution
        • Incomplete result columns for the SELECT statement
        • Garbled Chinese characters in the SQL execution result set
        • Garbled Chinese data is returned for query of data in GBK encoding
      • PL Object
        • Debugging is not supported for invalid PL objects
        • `JSONException` is reported during PL debugging
        • Garbled variable values in debugging
        • Failed to view PL objects or garbled characters are returned
        • PL objects cannot be executed or an execution error is returned
        • ODC issues during PL debugging
        • PL anonymous block cannot be debugged
        • Alert information of a PL object is unavailable
      • Import and Export
        • Garbled Chinese characters in an imported file in GBK encoding
        • Invalid ZIP package reported during file import
        • Time-type data exported from an Oracle tenant cannot be imported
        • Mismatched columns reported during the import of a single-table CSV file
        • Failed to export a result set in ODC to an Excel file
        • Incorrect display in Excel for a result set exported in CSV format
        • Incomplete data in batch export of multiple tables
        • `javax.crypto.BadPaddingException: Given final block not properly padded` is returned for a data import or export failure
      • Client ODC Problems
        • Client ODC startup failure / H2 Database corruption: Chuck not found
        • Garbled Chinese characters in the command-line window of ODC
        • Failed to install client ODC
        • Client ODC startup failure or no response
        • `Not a valid secret key` is returned for connection creation in client ODC
        • `User does not exist` returned for connection creation in client ODC
        • High memory usage of client ODC
        • Client ODC fails to be installed or start due to a port conflict
      • Front-end Page Exception
        • JavaScript exception is thrown on the ODC page
        • No response in browser after opening ODC
        • White screen in ODC
      • Account Password Problem
        • Forgot the admin account password in ODC V3.2.0 or later
        • Forgot an account password in ODC V2.4.1 to V3.1.3
        • Forgot an account password in ODC V2.4.0 or earlier
    • FAQ
      • Installation of client ODC
      • Web ODC deployment and startup
      • Connection information
      • Command-line window
      • DDL statement display
  • Release Note
    • 90.odc-rn-4.2
      • ODC V4.2.0
    • V4.1
      • ODC V4.1.2
      • ODC V4.1.1
      • ODC V4.1.0
    • V4.0
      • ODC V4.0.2
      • ODC V4.0.0
    • V3.4
      • ODC V3.4.0
    • V3.3
      • ODC V3.3.3
      • ODC V3.3.2
      • ODC V3.3.1
      • ODC V3.3.0
    • V3.2
      • ODC V3.2.3
      • ODC V3.2.2
      • ODC V3.2.1
      • ODC V3.2.0

Download PDF

What is ODC? Features Architecture Limitations User interface Overview Install Client ODC Use Client ODC Overview Deploy Web ODC Use Web ODC Create a data source Data source and project collaboration Session management Global variable management Recycle bin management Edit and execute SQL statements Compile and debug PL objects Command-line window Edit and export results Analyze SQL statements Data mocking Import schema and data Export schema and data Users and roles Automatic authorization Collaborative project management Risk levels, risk identification rules, and approval processes SQL check specifications Manage database changes SQL window specification Change lock-free structures Synchronize shadow tables Archive data Data cleanup Manage partitions SQL plan task Data desensitization Operation audit SSO integration Approval integration SQL approval integrationDeployment overview Preparations before deployment Deployment process Load and run an ODC image Deployment process Load and run an ODC image Deploy SSL certificate Deploy the NGINX proxy Configure certificate trust Deployment verificationOverview Preparations before upgrade Upgrade process Stop ODC of the earlier version Load and run an ODC image Upgrade process Stop ODC of the earlier version Load and run an ODC image Upgrade NGINX image Upgrade verification Rollback after upgrade failed ODC troubleshooting process View the runtime environment and version information View web ODC logsView client ODC logsView end-to-end ODC-related logsView ODC MetaDB dataQuery the index status in OceanBase Database V4.xQuery the index status in OceanBase Database V1.4.x to V3.2.xCollect JVM runtime informationUse tcpdump to capture packetsInstallation of client ODCWeb ODC deployment and startupConnection informationCommand-line windowDDL statement display ODC V4.2.0 ODC V4.1.2 ODC V4.1.1 ODC V4.1.0 ODC V4.0.2 ODC V4.0.0ODC V3.4.0ODC V3.3.3 ODC V3.3.2 ODC V3.3.1 ODC V3.3.0 ODC V3.2.3 ODC V3.2.2 ODC V3.2.1 ODC V3.2.0
OceanBase logo

The Unified Distributed Database for the AI Era.

Follow Us
Products
OceanBase CloudOceanBase EnterpriseOceanBase Community EditionOceanBase seekdb
Resources
DocsBlogLive DemosTraining & Certification
Company
About OceanBaseTrust CenterLegalPartnerContact Us
Follow Us

© OceanBase 2026. All rights reserved

Cloud Service AgreementPrivacy PolicySecurity
Contact Us
Document Feedback
  1. Documentation Center
  2. OceanBase Developer Center
  3. V4.2.0
iconOceanBase Developer Center
V 4.2.0
  • V 4.4.2
  • V 4.4.1
  • V 4.4.0
  • V 4.3.4
  • V 4.3.3
  • V 4.3.2
  • V 4.3.1
  • V 4.3.0
  • V 4.2.4
  • V 4.2.3
  • V 4.2.2
  • V 4.2.1
  • V 4.2.0
  • V 4.1.3 and earlier

Approval integration

Last Updated:2026-04-13 06:20:38  Updated
share
What is on this page
Background information
Execution process
Configuration
Configuration method
Configuration template
Prerequisites
Create approval integration
Manage approval integration
References

folded

share

Background information

ODC V4.2.0 has built-in approval processes that implement database security control in team collaboration scenarios. Each approval process has a risk level. In ODC, operations that hit the same risk level trigger the same approval process.

ODC V4.2.0 allows system administrators and users with external integration management permissions to configure integration with external approval systems. When editing an approval process, you can add an approval node to reference an integrated external approval system. In this way, you can combine external approval nodes with the built-in ODC approval process.

This topic describes how to configure and manage approval integration.

Execution process

1

  1. The ODC system administrator or a user with external integration management permissions enables approval integration and configures request/response API information for access to external approval systems based on configuration templates provided by ODC, and creates an external approval integration configuration.

  2. The ODC system administrator creates a task approval process and selects the external system integration node as an approval node.

  3. The ODC system administrator edits a risk level and selects the created approval process.

  4. An ODC member initiates a task ticket. If the approval role of the approval task process node is external system integration, ODC calls the API of the external approval system to create an approval process. The approval result is automatically synchronized to the ODC approval process.

Configuration

Configuration method

You can edit the YAML file online to configure approval integration. The YAML file allows you to configure the following information:

  1. HTTP connection parameters

  2. APIs for creating a process, querying process status, and terminating a process

  3. Encryption parameters

The following table describes the fields supported by the YAML file.

Level-1 parameter Level-2 parameter Level-3 parameter Level-4 parameter Type Default value Description
http connectTimeoutSeconds - - Integer 5 The connection timeout period of the HTTP request. Unit: seconds.
http socketTimeoutSeconds - - Integer 30 The socket timeout period of the HTTP request. Unit: seconds.
api start (used to initiate a new approval ticket request to the external approval system) method - Enum POST The HTTP request method. Valid values: GET, POST, PUT, and PATCH.
api start (used to initiate a new approval ticket request to the external approval system) url - String <NULL> The HTTP request address.
api start (used to initiate a new approval ticket request to the external approval system) headers - Map<String, String> <NULL> The HTTP request header.
api start (used to initiate a new approval ticket request to the external approval system) queryParameters - Map<String, String> <NULL> The HTTP request parameter.
api start (used to initiate a new approval ticket request to the external approval system) body type ENUM <NULL> The format of the HTTP request body. Valid values: FORM_DATA and RAW.
api start (used to initiate a new approval ticket request to the external approval system) body content Object <NULL> The content of the HTTP request body.
api start (used to initiate a new approval ticket request to the external approval system) requestEncrypted - Boolean false Specifies whether the HTTP request body is encrypted.
api start (used to initiate a new approval ticket request to the external approval system) requestSuccessExpression - String <NULL> An expression that parses the response body and determines whether a request is successfully executed. The expression conforms to the Spring Expression Language (SPEL) syntax specification.
api start (used to initiate a new approval ticket request to the external approval system) extractInstanceIdExpression - String <NULL> An expression that parses the external approval system process ID based on the response body. The expression conforms to the SPEL syntax specification.
api status (used to initiate an approval status query request to the external approval system) method - Enum POST The HTTP request method. Valid values: GET, POST, PUT, and PATCH.
api status (used to initiate an approval status query request to the external approval system) url - String <NULL> The HTTP request address.
api status (used to initiate an approval status query request to the external approval system) headers - Map<String, String> <NULL> The HTTP request header.
api status (used to initiate an approval status query request to the external approval system) queryParameters - Map<String, String> <NULL> The HTTP request parameter.
api status (used to initiate an approval status query request to the external approval system) body type ENUM <NULL> The format of the HTTP request body. Valid value: FORM_DATA.
api status (used to initiate an approval status query request to the external approval system) body content Object <NULL> The content of the HTTP request body.
api status (used to initiate an approval status query request to the external approval system) requestEncrypted - Boolean false Specifies whether the HTTP request body is encrypted.
api status (used to initiate an approval status query request to the external approval system) requestSuccessExpression - String <NULL> An expression that parses the response body and determines whether a request is successfully executed. The expression conforms to the SPEL syntax specification.
api status (used to initiate an approval status query request to the external approval system) processPendingExpression - String <NULL> An expression that parses the response body and determines whether the approval ticket is in the pending status. The expression conforms to the SPEL syntax specification.
api status (used to initiate an approval status query request to the external approval system) processApprovedExpression - String <NULL> An expression that parses the response body and determines whether the approval ticket is in the approved status. The expression conforms to the SPEL syntax specification.
api status (used to initiate an approval status query request to the external approval system) processRejectedExpression - String <NULL> An expression that parses the response body and determines whether the approval ticket is in the rejected status. The expression conforms to the SPEL syntax specification.
api status (used to initiate an approval status query request to the external approval system) processTerminatedExpression - String <NULL> An expression that parses the response body and determines whether the approval ticket is in the terminated status. The expression conforms to the SPEL syntax specification.
api status (used to initiate an approval status query request to the external approval system) responseEncrypted - Boolean false Specifies whether the HTTP response body is encrypted.
api cancel (used to initiate a ticket cancel request to the external approval system) method - Enum POST The HTTP request method. Valid values: GET, POST, PUT, and PATCH.
api cancel (used to initiate a ticket cancel request to the external approval system) url - String <NULL> The HTTP request address.
api cancel (used to initiate a ticket cancel request to the external approval system) headers - Map<String, String> <NULL> The HTTP request header.
api cancel (used to initiate a ticket cancel request to the external approval system) queryParameters - Map<String, String> <NULL> The HTTP request parameter.
api cancel (used to initiate a ticket cancel request to the external approval system) body type ENUM <NULL> The format of the HTTP request body. Valid value: FORM_DATA.
api cancel (used to initiate a ticket cancel request to the external approval system) body content Object <NULL> The content of the HTTP request body.
api cancel (used to initiate a ticket cancel request to the external approval system) requestEncrypted - Boolean false Specifies whether the HTTP request body is encrypted.
api cancel (used to initiate a ticket cancel request to the external approval system) requestSuccessExpression - String <NULL> An expression that parses the response body and determines whether a request is successfully executed. The expression conforms to the SPEL syntax specification.
api cancel (used to initiate a ticket cancel request to the external approval system) responseEncrypted - Boolean false Specifies whether the HTTP response body is encrypted.
approvalTimeoutSeconds - - - Integer 86400 The approval timeout period. Unit: seconds. When the specified period expires, ODC actively terminates the approval instance.
advanced hyperlinkExpression - - String <NULL> An expression that constructs the URL address that redirects the external approval system to view ticket details.

Configuration template

# This is a template for integrating a custom approval system.
# You must fill in all required fields according to the requirements to adapt to your approval system.


# Approval timeout in seconds
# ODC will actively terminate the external process instance if this value is exceeded
approvalTimeoutSeconds: 86400

# HTTP configurations
http:
  # HTTP connection timeout in seconds
  connectTimeoutSeconds: 5
  # HTTP socket timeout in seconds
  socketTimeoutSeconds: 30

# API configurations
api:
  # API configurations used to start a process instance
  start:
    # The request method. Valid values: GET, POST, PUT, and PATCH.
    method: ~
    # Request URI
    url: ~
    # The request header in the <key: value> format.
    headers:
      # Sample of headers
      Content-Type: application/json;charset=UTF-8
      Accept: application/json
    # Request query parameters in the <key: value> format.
    queryParameters: ~
    # Request body
    body:
      # The type of request body. Valid values: FORM_DATA and RAW.
      type: RAW
      # The content of request body in the <String> or <key: value> format. <String> is supported for the RAW type and <key: value> is supported for the FORM_DATA type.
      # Sample of request content in the RAW type
      content: |-
        {
          "userId": "${user.id}",
          "userName": "${user.name}",
          "taskType": "${task.type}",
          "connection": "${connection.name}",
          "tenant": "${connection.tenant}"
        }
    # Mark whether the request body is encrypted
    requestEncrypted: false
    # Expression to judge whether the request is successful based on the response body analysis, using the SPEL syntax
    requestSuccessExpression: '[success] == true'
    # Mark whether the response body is encrypted
    responseEncrypted: false
    # Expression to extract ID of process instance created by the external system based on the response body analysis, using the SPEL syntax
    extractInstanceIdExpression: '[content][processInstanceId]'
  # API configurations used to query the status of a process instance
  # Usage of the parameter with the same name is consistent with that described above
  status:
    method: ~
    url: ~
    headers: ~
    queryParameters: ~
    body:
      type: FORM_DATA
      # Sample of request content in type of FORM_DATA
      content:
        processInstanceId: ${process.instance.id}
        authKey: this-is-an-example
    requestEncrypted: false
    requestSuccessExpression: '[success] == true'
    responseEncrypted: false
    # Expression to judge that the process instance is waiting for approval based on the response body analysis, using the SPEL syntax
    processPendingExpression: '[content][processInstanceStatus] == "RUNNING"'
    # Expression to judge that the process instance is approved based on the response body analysis, using the SPEL syntax
    processApprovedExpression: '[content][outResult] == "APPROVED"'
    # Expression to judge that the process instance is rejected based on the response body analysis, using the SPEL syntax
    processRejectedExpression: '[content][outResult] == "REJECTED"'
    # Expression to judge that the process instance is terminated based on the response body analysis, using the SPEL syntax
    processTerminatedExpression: '[content][processInstanceStatus]=="TERMINATED"'
  # API configurations used to cancel a process instance
  # Usage of the parameter with the same name is consistent with that described above
  cancel:
    method: ~
    url: ~
    headers: ~
    queryParameters: ~
    body:
      type: RAW
      # Sample of request content in the RAW type
      content: |-
        {
          "processInstanceId": "${processInstanceId}"
        }
    requestEncrypted: false
    requestSuccessExpression: '[success] == true'
    responseEncrypted: false

# Advanced parameters
advanced:
  # Expression to build URL for jumping to external system to view ticket details
  hyperlinkExpression: http://localhost:5678/instanceDetails/?procInsId=${process.instance.id}

Prerequisites

You are the system administrator or have the external integration management permissions.

Create approval integration

  1. In the project collaboration window, choose External Integration > Approval Integration > Create Approval Integration.

  2. In the Create Approval Integration panel, specify the following parameters.

    Parameter Description
    Name The name of the approval integration configuration.
    Status Specifies whether to enable the approval integration configuration.
    Settings Edit the YAML file online to configure approval integration. For more information, see Configuration.
  3. Click Save. The approval integration configuration is created.

  4. In the approval integration list, you can enable, view, edit, and delete approval integration settings.

  5. Edit the approval process and reference the approval integration configuration.

Manage approval integration

In the approval integration list, click View, Edit, or Delete in the Actions column to view, edit, or delete the approval integration configuration.

References

  • SQL approval integration

  • Risk levels, identification rules, and approval processes

Previous topic

SSO integration
Last

Next topic

SQL approval integration
Next
What is on this page
Background information
Execution process
Configuration
Configuration method
Configuration template
Prerequisites
Create approval integration
Manage approval integration
References