Oracle Database Security Assessment Report - Fine-Grained Access Control
The Oracle Database Security Assessment Report - Fine-Grained Access Control section displays the following information:
| Name | Finding ID | Description | Link(s) |
|---|---|---|---|
| Data Redaction | ACCESS.DATAREDACTION | Displays information on Data Redaction policies, exempted users, and execute grants on the DBMS_REDACT package. Data Redaction automatically masks sensitive data found in the results of a database query. | |
| Virtual Private Database | ACCESS.VPD | Displays information on Virtual Private Database policies, exempted users, and execute grants on the DBMS_RLS package. VPD allows for fine-grained control over the rows and columns of a table are visible to a SQL statement. | |
| Real Application Security | ACCESS.RAS | Displays information on Real Application Security policies, exempted users, and users granted ADMIN_SEC_POLICY and APPLY_SEC_POLICY. Real Application Security (RAS) is a more modern, advanced version of Virtual Private Database and provides fine-grained control over the rows and columns of a table that are visible to a SQL statement. | |
| Label Security | ACCESS.LABELSECURITY | Displays whether Oracle Label Security is enabled. Oracle Label Security provides the ability to tag data with a data label or a data classification. Access to sensitive data is controlled by comparing the data label with the requesting user's label or security clearance. | |
| Transparent Sensitive Data Protection | ACCESS.TSDP | Displays information on Transparent Sensitive Data policies and the users that can manage it. TSDP was introduced in Oracle Database 12c Release 1 (12.1), and allows a data type to be associated with each column that contains sensitive data. TSDP can then apply various data security features to all instances of a particular type so that protection is uniform and consistent. |
The following figure displays an example of the Oracle Database Security Assessment Report - Fine-Grained Access Control section:
