Oracle 12c - Data Redaction

最新推荐文章于 2024-04-03 16:49:01 发布

chncaesar

最新推荐文章于 2024-04-03 16:49:01 发布

阅读量1.8k

点赞数

分类专栏： Oracle 文章标签： 12c Data Redaction

本文链接：https://blog.csdn.net/chncaesar/article/details/17320669

版权

本文介绍了Oracle 12c中的数据脱敏，包括环境设置、权限管理、数据脱敏策略的添加和删除，以及显示格式的更改。在尝试添加数据脱敏策略时，可能会遇到错误，但通过特定操作可以成功设置。

摘要由CSDN通过智能技术生成

Env

Virtualbox + Oracle Linux 64bit 6.4 + Oracle database 12.1

Introduction

A new security feature is intorudced in 12c, one of top-10 favourite new features of Tom Kyte. It's also known as data masking. Data redaction hides sensitive data from low-privileged users. For example, your credit card number, date of birth should be masked in a CRM application.
Data redaction takes places on the fly, it does not change the data in the database.Data redaction does not apply to users with "EXEMPT REDACTION POLICY". SYSDBA and DBA are not affected by data redaction.

Adding a new redaction policy:

begin
  dbms_redact.add_policy(object_schema =< 'HR',
                         object_name =< 'EMPLOYEES',
                         column_name =< 'SALARY',
                         policy_name =< 'SALARY_REDACTION',