Planning the Creation of an Oracle Data Redaction Policy Who Can Create Oracle Data Redaction Policies? This section contains the following topics: You can enable and disable policies as necessary.
ORACLE DATA REDACTION EXAMPLE HOW TO
The following example drops the redaction policy and queries the data, showing the redaction is no longer taking place.5 Configuring Oracle Data Redaction PoliciesĪn Oracle Data Redaction policy defines how to redact data in a column based on the table column type and the type of redaction you want to use. The DROP_POLICY procedure is used to remove an existing redaction policy. For a numeric data type we specify a comma separated list of three elements (value to redact to, start point, end point), so in this case we want the first 12 characters of the number to always display as "111111111111". Notice the FUNCTION_PARAMETERS are now specified to give instructions how the partial redaction should take place. The following example changes the previously created redaction policy so that it uses partial redaction.
Depending on the action required, the relevant parameters must be specified. The type of change being made is controlled using the ACTION parameter. The ALTER_POLICY procedure allows you to make changes to an existing policy. SELECT * FROM redaction_values_for_type_full OBJECT_OWNER OBJECT_NAME POLICY_NAME EXPRESSION ENABLE POLICY_DESĬOLUMN timestamp_with_time_zone_value FORMAT A32 SQL> GRANT EXECUTE ON sys.dbms_redact TO scott ĮMPNO NAME JOB BOSS HIREDATE SALARY COMM DEPTNO It can be used with the following column data types: NUMBER, BINARY_FLOAT, BINARY_DOUBLE, CHAR, VARCHAR2, NCHAR, NVARCHAR2, DATE, TIMESTAMP, TIMESTAMP WITH TIME ZONE, BLOB, CLOB, and NCLOB.Įxamples to show use of data redaction features What data types can be used for data redaction? This is widely used during testing phase of redaction policies that will eventually find their way to production environments. No redaction - Allows testing the inner workings of redaction policies, with no effect on the results of current running queries. Random redaction – Returned values are random each time a query is executed, the displayed data will be different. Regular expressions - You can use regular expressions to search for patterns of data that must be protected. For example, the first digits of the credit card number are replaced by asterisks. Partial redaction – Only part of the information is changed. This setting can be changed at the database level. For columns of type character, a space will be returned. For numeric columns, the value zero will be returned. You can protect data at the column level using one of the following methods::įull redaction – All content of the column is protected and the type of value returned depends on the data type of the column. How many ways to protect data using data redaction?
You must restart the database to take effect.
ORACLE DATA REDACTION EXAMPLE FULL
DBMS_REDACT.ALTER_POLICY – allows changes to existing policies.ĭBMS_REDACT.DISABLE_POLICY – disables an existing policy.ĭBMS_REDACT.DROP_POLICY – drop an existing policy.ĭBMS_REDACT.ENABLE_POLICY – enables an existing policy.ĭBMS_REDACT.UPDATE_FULL_REDACTION_VALUES – change the default return value for full redaction.
0 kommentar(er)
