3 Configuring Oracle Data Redaction Policies
An Oracle Data Redaction policy defines how to redact data in a column based on the table column type and the type of redaction you want to use.
- About Oracle Data Redaction Policies
An Oracle Data Redaction policy defines the conditions in which redaction must occur. - Privileges for Managing Oracle Data Redaction Policies
Because data redaction involves the protection of highly sensitive data, only trusted users should create Oracle Data Redaction policies. - General Syntax of the DBMS_REDACT.ADD_POLICY Procedure
To create a Data Redaction policy, you must use theDBMS_REDACT.ADD_POLICY
procedure. - Planning an Oracle Data Redaction Policy
Before you create a Oracle Data Redaction policy, you should plan the data redaction policy that best suits your site’s needs. - Using Expressions to Define Conditions for Data Redaction Policies
Theexpression
parameter in theDBMS_REDACT.ADD_POLICY
orDBMS_REDACT.ALTER_POLICY
procedures sets the conditions under which those policies apply. - Creating and Managing Multiple Named Policy Expressions
A named, centrally managed Oracle Data Redaction policy expression can be used in multiple redaction policies and applied to multiple tables or views. - Creating a Full Redaction Policy and Altering the Full Redaction Value
You can create a full redaction policy to redact all contents in a data column, and optionally, you can alter the default full redaction value. - Creating a Partial Redaction Policy
In partial data redaction, you can redact portions of data for different kinds of data types. - Creating a Regular Expression-Based Redaction Policy
A regular expression-based redaction policy enables you to redact data based on a search-and-replace model. - Creating a Random Redaction Policy
A random redaction policy presents redacted data as randomly generated values, such asUkjsl32[[]]]s
for the character data type. - Creating a Nullify Redaction Policy
You can create Oracle Data Redaction policies that return null values for the displayed value of the table or view column. - Creating a Policy That Uses No Redaction
You can create policies that use no redaction at all, for when you want to test the policy in a development environment. - Exemption of Users from Oracle Data Redaction Policies
You can exempt users from having Oracle Data Redaction policies applied to the data they access. - Redacting Multiple Columns
You can redact more than one column in a Data Redaction policy. - Altering an Oracle Data Redaction Policy
TheDBMS_REDACT.ALTER_POLICY
procedure enables you to modify Oracle Data Redaction policies. - Disabling and Enabling an Oracle Data Redaction Policy
You can disable and then reenable Oracle Data Redactions policies as necessary. - Dropping an Oracle Data Redaction Policy
TheDBMS_REDACT.DROP_POLICY
procedure drops Oracle Data Redaction policies. - Tutorial: SQL Expressions to Build Reports with Redacted Values
SQL expressions can be used to build reports based on columns that have Oracle Data Redaction policies defined on them.