Oracle Data Redaction Policy Data Dictionary Views

C Oracle Data Redaction Policy Data Dictionary Views

Oracle Database provides data dictionary views that list information about Data Redaction policies.

Before you can query these views, you must be granted the SELECT_CATALOG_ROLE role.

C.1 REDACTION_COLUMNS

REDACTION_COLUMNS describes all redacted columns in the database, giving the owner of the table or view within which the column resides, the object name, the column name, the type of redaction function, the parameters to the redaction function (if any), and an optional user-provided description of the redaction function that is performed on the column.

Column	Datatype	NULL	ullDescription
`OBJECT_OWNER`	`VARCHAR2(128)`	`NOT NULL`	Owner of the object that is redacted
`OBJECT_NAME`	`VARCHAR2(128)`	`NOT NULL`	Name of the object that is redacted
`COLUMN_NAME`	`VARCHAR2(128)`	`NOT NULL`	Name of the column that is redacted
`FUNCTION_TYPE`	`VARCHAR2(27)`		Redaction function for this column
`FUNCTION_PARAMETERS`	`VARCHAR2(1000)`		Redaction function_parameters for this column
`REGEXP_PATTERN`	`VARCHAR2(512)`		Regular expression pattern to search for
`REGEXP_REPLACE_STRING`	`VARCHAR2(4000)`		Replacement string (up to 4000 characters in length) with up to 500 back-references to subexpressions in the form `\n`, (where `n` is a number from 1 to 9)
`REGEXP_POSITION`	`NUMBER`		Integer counting from 1, giving the position where the search should begin
`REGEXP_OCCURRENCE`	`NUMBER`		Either `0` (to replace all occurrences of the match), or a positive integer `n` (to replace the `n`th occurrence of the match)
`REGEXP_MATCH_PARAMETER`	`VARCHAR2(10)`		To change the default matching behavior, possible values are a combination of `i`, `c`, `n`, `m`, and `x`. See the documentation of the `match_parameter` in the `REGEXP_REPLACE` section of the Oracle Database SQL Language Reference.
`COLUMN_DESCRIPTION`	`VARCHAR2(4000)`		User-provided description of the redaction function that is performed on the column. For example, for a Social Security Number column, the description might be: "redact SSN to XXX-XX-(last 4 digits)".

C.2 REDACTION_EXPRESSIONS

REDACTION_EXPRESSIONS shows all the Data Redaction named Policy Expressions in the database.

Column	Datatype	Description
`POLICY_EXPRESSION_NAME`	`VARCHAR2(256)`	Customer-specified name of the named Policy Expression
`EXPRESSION`	`VARCHAR2(4000)`	The SQL expression defined for this Data Redaction named Policy Expression
`OBJECT_OWNER`	`VARCHAR2(128)`	Owner of the table or view which this named Policy Expression is associated with
`OBJECT_NAME`	`VARCHAR2(128)`	Name of the table or view which this named Policy Expression is associated with
`COLUMN_NAME`	`VARCHAR2(128)`	Name of the column which this named Policy Expression is associated with
`POLICY_EXPRESSION_DESCRIPTION`	`VARCHAR2(4000)`	Description of this named Policy Expression

C.3 REDACTION_POLICIES

REDACTION_POLICIES displays all redaction policies in the database.

Column	Datatype	NULL	Description
`OBJECT_OWNER`	`VARCHAR2(128)`	`NOT NULL`	Owner of the object with the policy
`OBJECT_NAME`	`VARCHAR2(128)`	`NOT NULL`	Name of the object with the policy
`POLICY_NAME`	`VARCHAR2(128)`	`NOT NULL`	Name of the policy
`EXPRESSION`	`VARCHAR2(4000)`	`NOT NULL`	Expression for this policy
`ENABLE`	`VARCHAR2(7)`		Indicates whether the policy is enabled (`YES`) or not (`NO`)
`POLICY_DESCRIPTION`	`VARCHAR2(4000)`		Description of the policy

C.4 REDACTION_VALUES_FOR_TYPE_FULL

REDACTION_VALUES_FOR_TYPE_FULL shows all of the current values for full redaction.

For example, if a redaction policy is applied to a column of type BINARY_DOUBLE and the redaction type is full redaction, that column will be redacted with the value shown in the BINARY_DOUBLE_VALUE column of this view.

Column	Datatype	NULL	Description
`NUMBER_VALUE`	`NUMBER`	`NOT NULL`	Redaction result for full redaction on NUMBER columns
`BINARY_FLOAT_VALUE`	`BINARY_FLOAT`	`NOT NULL`	Redaction result for full redaction on BINARY_FLOAT columns
`BINARY_DOUBLE_VALUE`	`BINARY_DOUBLE`	`NOT NULL`	Redaction result for full redaction on BINARY_DOUBLE columns
`CHAR_VALUE`	`VARCHAR2(1)`		Redaction result for full redaction on CHAR columns
`VARCHAR_VALUE`	`VARCHAR2(1)`		Redaction result for full redaction on VARCHAR2 columns
`NCHAR_VALUE`	`NCHAR(1)`		Redaction result for full redaction on NCHAR columns
`NVARCHAR_VALUE`	`NVARCHAR2(1)`		Redaction result for full redaction on NVARCHAR2 columns
`DATE_VALUE`	`DATE`	`NOT NULL`	Redaction result for full redaction on DATE columns
`TIMESTAMP_VALUE`	`TIMESTAMP(6)`	`NOT NULL`	Redaction result for full redaction on TIMESTAMP columns
`TIMESTAMP_WITH_TIME_ZONE_VALUE`	`TIMESTAMP(6) WITH TIME ZONE`	`NOT NULL`	Redaction result for full redaction on TIMESTAMP WITH TIME ZONE columns
`BLOB_VALUE`	`BLOB`		Redaction result for full redaction on BLOB columns
`CLOB_VALUE`	`CLOB`		Redaction result for full redaction on CLOB columns
`NCLOB_VALUE`	`NCLOB`		Redaction result for full redaction on NCLOB columns