Oracle 12c - Data Redaction

最新推荐文章于 2024-11-28 10:44:08 发布

原创

最新推荐文章于 2024-11-28 10:44:08 发布 · 1.9k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#12c #Data Redaction

本文介绍了Oracle 12c中的数据脱敏，包括环境设置、权限管理、数据脱敏策略的添加和删除，以及显示格式的更改。在尝试添加数据脱敏策略时，可能会遇到错误，但通过特定操作可以成功设置。

Env

Virtualbox + Oracle Linux 64bit 6.4 + Oracle database 12.1

Introduction

A new security feature is intorudced in 12c, one of top-10 favourite new features of Tom Kyte. It's also known as data masking. Data redaction hides sensitive data from low-privileged users. For example, your credit card number, date of birth should be masked in a CRM application.
Data redaction takes places on the fly, it does not change the data in the database.Data redaction does not apply to users with "EXEMPT REDACTION POLICY". SYSDBA and DBA are not affected by data redaction.

Adding a new redaction policy:

begin
  dbms_redact.add_policy(object_schema =< 'HR',
                         object_name =< 'EMPLOYEES',
                         column_name =< 'SALARY',
                         policy_name =< 'SALARY_REDACTION',
                         function_type =< dbms_redact.FULL,
                         expression =&