Configuring Oracle Data Redaction Policies

An Oracle Data Redaction policy defines how to redact data in a column based on the table column type and the type of redaction you want to use.

• About Oracle Data Redaction Policies

  An Oracle Data Redaction policy defines the conditions in which redaction must occur.

• Privileges for Managing Oracle Data Redaction Policies

  Because data redaction involves the protection of highly sensitive data, only trusted users should create Oracle Data Redaction policies.

• General Syntax of the DBMS_REDACT.ADD_POLICY Procedure

  To create a Data Redaction policy, you must use the DBMS_REDACT.ADD_POLICY procedure.

• Planning an Oracle Data Redaction Policy

  Before you create a Oracle Data Redaction policy, you should plan the data redaction policy that best suits your site’s needs.

• Using Expressions to Define Conditions for Data Redaction Policies

  The expression parameter in the DBMS_REDACT.ADD_POLICY or DBMS_REDACT.ALTER_POLICY procedures sets the conditions under which those policies apply.

• Creating and Managing Multiple Named Policy Expressions

  A named, centrally managed Oracle Data Redaction policy expression can be used in multiple redaction policies and applied to multiple tables or views.

• Creating a Full Redaction Policy and Altering the Full Redaction Value

  You can create a full redaction policy to redact all contents in a data column, and optionally, you can alter the default full redaction value.

• Creating a Partial Redaction Policy

  In partial data redaction, you can redact portions of data for different kinds of data types.

• Creating a Regular Expression-Based Redaction Policy

  A regular expression-based redaction policy enables you to redact data based on a search-and-replace model.

• Creating a Random Redaction Policy

  A random redaction policy presents redacted data as randomly generated values, such as Ukjsl32[[]]]s for the character data type.

• Creating a Nullify Redaction Policy

  You can create Oracle Data Redaction policies that return null values for the displayed value of the table or view column.

• Creating a Policy That Uses No Redaction

  You can create policies that use no redaction at all, for when you want to test the policy in a development environment.

• Exemption of Users from Oracle Data Redaction Policies

  You can exempt users from having Oracle Data Redaction policies applied to the data they access.

• Redacting Multiple Columns

  You can redact more than one column in a Data Redaction policy.

• Altering an Oracle Data Redaction Policy

  The DBMS_REDACT.ALTER_POLICY procedure enables you to modify Oracle Data Redaction policies.

• Disabling and Enabling an Oracle Data Redaction Policy

  You can disable and then reenable Oracle Data Redactions policies as necessary.

• Dropping an Oracle Data Redaction Policy

  The DBMS_REDACT.DROP_POLICY procedure drops Oracle Data Redaction policies.

• Tutorial: SQL Expressions to Build Reports with Redacted Values

  SQL expressions can be used to build reports based on columns that have Oracle Data Redaction policies defined on them.