Views REDACTION_POLICIES, REDACTION_COLUMNSįollowing views shows all details about defined redaction policies 'sys_context(''USERENV'', ''SESSION_USER'')=''REDACT_USER''',Īs you can notice now VARCHAR2_ID shows nothing SELECT * FROM test_tbl VARCHAR_VALUE NCHAR_VALUE NVARCHAR_VALUE DATE_VALUE NUMBER_VALUE BINARY_FLOAT_VALUE BINARY_DOUBLE_VALUE CHAR_VALUE Constant values are visible in view REDACTION_VALUES_FOR_TYPE_FULL for FULL redaction. you can apply VPD policies on other columns then those redactedįor this type redaction columns are redacted to constant values based on the column data type. cannot redact columns of specific data types.cannot redact SYS, nor SYSTEM schema objects.To define redaction policy you need to use procedure DBMS_REDACT.ADD_POLICY Enterprise Manager Cloud Control 12C supports Oracle Data Redaction.EXECUTE privileges is required to execute the procedures.DISABLE_POLICY – disable a redaction policy.ENABLE_POLICY – enable a redaction policy after it is disabled.ALTER_POLICY – change a redaction policy.You can use package DBMS_REDACT to manage redact policies.REGULAR EXPRESSIONS – a “match and replace” is performed based on parameters.PARTIAL – user specified positions are replaced by a user specified character.FULL – columns are redacted to constant values based on the column data type.Then create test table with test data CONNECT redact_user/redact_userįollowing redaction methods will be presented GRANT EXECUTE ON dbms_redact TO redact_user GRANT SELECT ON sys.redaction_values_for_type_full TO redact_user GRANT SELECT ON sys.redaction_columns TO redact_user GRANT SELECT ON sys.redaction_policies TO redact_user TO redact_user IDENTIFIED BY redact_user NOTE – only one how to redact can be specified when you create the policyįirst create a user to test the feature GRANT CONNECT, RESOURCE, UNLIMITED TABLESPACE
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |