FUNCTION CheckPassword (
        Login_        IN EMPLOYEES.Login%TYPE,
        Password_     IN Varchar2,
        ID_Employee_  OUT EMPLOYEES.ID_Employee%TYPE
        ) RETURN VARCHAR2 AS
	HashPwd Employees.HashPassword%Type;
	rec Employees%ROWTYPE;
Begin
    if Password_ Is NULL OR  Password_='' then
      return ' Пароль не задан ' ;
	end if;
HashPwd := utl_raw.cast_to_raw(main.get_hash_value (Password_));
     begin
     select * into rec from Employees where Login = Login_ And HashPassword = HashPwd;
	 EXCEPTION WHEN NO_DATA_FOUND THEN
	 return ' Ошибка в имени или пароле ' ;
	 end;
ID_Employee_  := rec.ID_Employee;
if (rec.Date_work_start IS NOT NULL AND trunc(rec.Date_work_start) > trunc(SYSDATE)) OR
   (rec.Date_work_end IS NOT NULL AND  trunc(rec.Date_work_end) < trunc(SYSDATE)) then
   return 'Пользователь не работает в компании';
end if;

return '';
end CheckPassword;

        public bool CheckPermissions(string userName, string userPassword)
        {
            OracleConnection oracleConnection = (OracleConnection)_session.Connection;

            const string cSQL = "XYZ.MAIN.CHECKPASSWORD";

            try
            {
                OracleCommand _cmd = oracleConnection.CreateCommand();
                _cmd.CommandText = cSQL;
                _cmd.CommandType = CommandType.StoredProcedure;

                OracleParameter _RetVal = new OracleParameter("RetVal", OracleDbType.Varchar2, ParameterDirection.ReturnValue);
                _cmd.Parameters.Add(_RetVal);
                _cmd.Parameters.Add("LOGIN_", OracleDbType.Varchar2, userName, ParameterDirection.Input);
                _cmd.Parameters.Add("PASSWORD_", OracleDbType.Varchar2, userPassword, ParameterDirection.Input);
                OracleParameter _IdEmplloyee = new OracleParameter("ID_EMPLOYEE_", OracleDbType.Int32, ParameterDirection.Output);
                _cmd.Parameters.Add(_IdEmplloyee);

                _cmd.ExecuteNonQuery();

                if (_IdEmplloyee.Value == DBNull.Value)
                    throw new Exception(_RetVal.Value.ToString());

                int userID = Convert.ToInt32(_IdEmplloyee.Value);

                return true;
            }
            catch (Exception ex)
            {
                throw new Exception(ex.Message);
            }
        }