#ORACLE DATA REDACTION EXAMPLE HOW TO#
#ORACLE DATA REDACTION EXAMPLE FULL#

That is, it must not be part of the VPD predicate generated by the VPD policy function.ĭecide on the type of redaction that you want to perform: full, random, partial, regular expressions, or none.ĭecide which users to apply the Data Redaction policy to.īased on this information, create the Data Redaction policy by using the DBMS_REDACT.ADD_POLICY procedure.Ĭonfigure the policy to have additional columns to be redacted, as described in 'Redacting Multiple Columns'.Īfter you create the Data Redaction policy, it is automatically enabled and ready to redact data.ĥ.4 General Syntax of the DBMS_REDACT.ADD_POLICY Procedure

Table 5-1 lists the procedures in the DBMS_REDACT package.ĥ.3 Planning the Creation of an Oracle Data Redaction Policyīefore you create an Oracle Data Redaction policy, it is important to plan the data redaction process that best suits your data.Įnsure that you have been granted the EXECUTE privilege on the DBMS_REDACT PL/SQL package.ĭetermine the data type of the table or view column that you want to redact.Įnsure that this column is not used in an Oracle Virtual Private Database (VPD) row filtering condition. Policy expressions can make use of the SYS_SESSION_ROLES namespace with the SYS_CONTEXT function to check for enabled roles. For security reasons, the functions and operators that can be used in the policy expression are limited to SYS_CONTEXT and a few others. Redaction takes place when the boolean result of evaluating the policy expression is TRUE. In addition, you can define a Data Redaction policy to not redact any data at all, for when you want to test your policies in a test environment.Ī Data Redaction policy can be defined with a policy expression which allows for different application users to be presented with either redacted data or actual data, based on whether the policy expression returns TRUE or FALSE. Oracle Database performs the redaction at execution time, just before the data is returned to the application.Ī Data Redaction policy can fully redact values, partially redact values, or randomly redact values. The Data Redaction policy defines the following: What kind of redaction to perform, how the redaction should occur, and when the redaction takes place.

#ORACLE DATA REDACTION EXAMPLE FULL#

Using Expressions to Define Conditions for Data Redaction PoliciesĬreating a Full Redaction Policy and Altering the Default Full Redaction ValueĬreating a Regular Expression-Based Redaction PolicyĮxempting Users from Oracle Data Redaction Policiesĭisabling and Enabling an Oracle Data Redaction PolicyĮxample: How Oracle Data Redaction Affects Tables and ViewsĮxample: Using SQL Expressions to Build Reports with Redacted Valuesįinding Information About Oracle Data Redaction PoliciesĪn Oracle Data Redaction policy defines the conditions in which redaction must occur for a table or view.Ī Data Redaction policy has the following characteristics:

General Syntax of the DBMS_REDACT.ADD_POLICY Procedure

Planning the Creation of an Oracle Data Redaction Policy Who Can Create Oracle Data Redaction Policies? This section contains the following topics:

You can enable and disable policies as necessary.

#ORACLE DATA REDACTION EXAMPLE HOW TO#

5 Configuring Oracle Data Redaction PoliciesĪn Oracle Data Redaction policy defines how to redact data in a column based on the table column type and the type of redaction you want to use.

Oracle data redaction example