Oracle Data Redaction Policy Data Dictionary Views

Oracle Database provides data dictionary views that list information about Data Redaction policies.

Before you can query these views, you must be granted the SELECT_CATALOG_ROLE role.

REDACTION_COLUMNS

REDACTION_COLUMNS describes all redacted columns in the database, giving the owner of the table or view within which the column resides, the object name, the column name, the type of redaction function, the parameters to the redaction function (if any), and an optional user-provided description of the redaction function that is performed on the column.

Column Datatype NULL ullDescription
OBJECT_OWNER VARCHAR2(128) NOT NULL Owner of the object that is redacted
OBJECT_NAME VARCHAR2(128) NOT NULL Name of the object that is redacted
COLUMN_NAME VARCHAR2(128) NOT NULL Name of the column that is redacted
FUNCTION_TYPE VARCHAR2(27)   Redaction function for this column
FUNCTION_PARAMETERS VARCHAR2(1000)   Redaction function_parameters for this column
REGEXP_PATTERN VARCHAR2(512)   Regular expression pattern to search for
REGEXP_REPLACE_STRING VARCHAR2(4000)   Replacement string (up to 4000 characters in length) with up to 500 back-references to subexpressions in the form \n, (where n is a number from 1 to 9)
REGEXP_POSITION NUMBER   Integer counting from 1, giving the position where the search should begin
REGEXP_OCCURRENCE NUMBER   Either 0 (to replace all occurrences of the match), or a positive integer n (to replace the nth occurrence of the match)
REGEXP_MATCH_PARAMETER VARCHAR2(10)   To change the default matching behavior, possible values are a combination of i, c, n, m, and x. See the documentation of the match_parameter in the REGEXP_REPLACE section of the Oracle AI Database SQL Language Reference.
COLUMN_DESCRIPTION VARCHAR2(4000)   User-provided description of the redaction function that is performed on the column. For example, for a Social Security Number column, the description might be: “redact SSN to XXX-XX-(last 4 digits)”.

See Also: Oracle AI Database Data Redaction Guide for more information about Oracle Data Redaction

REDACTION_EXPRESSIONS

REDACTION_EXPRESSIONS shows all the Data Redaction named Policy Expressions in the database.

Column Datatype NULL Description
POLICY_EXPRESSION_NAME VARCHAR2(256)   Customer-specified name of the named Policy Expression
EXPRESSION VARCHAR2(4000)   The SQL expression defined for this Data Redaction named Policy Expression
OBJECT_OWNER VARCHAR2(128)   Owner of the table or view which this named Policy Expression is associated with
OBJECT_NAME VARCHAR2(128)   Name of the table or view which this named Policy Expression is associated with
COLUMN_NAME VARCHAR2(128)   Name of the column which this named Policy Expression is associated with
POLICY_EXPRESSION_DESCRIPTION VARCHAR2(4000)   Description of this named Policy Expression

REDACTION_POLICIES

REDACTION_POLICIES displays all redaction policies in the database.

Column Datatype NULL Description
OBJECT_OWNER VARCHAR2(128) NOT NULL Owner of the object with the policy
OBJECT_NAME VARCHAR2(128) NOT NULL Name of the object with the policy
POLICY_NAME VARCHAR2(128) NOT NULL Name of the policy
EXPRESSION VARCHAR2(4000) NOT NULL Expression for this policy
ENABLE VARCHAR2(7)   Indicates whether the policy is enabled (YES) or not (NO)
POLICY_DESCRIPTION VARCHAR2(4000)   Description of the policy

See Also: Oracle AI Database Data Redaction Guide for more information about Oracle Data Redaction

REDACTION_VALUES_FOR_TYPE_FULL

REDACTION_VALUES_FOR_TYPE_FULL shows all of the current values for full redaction.

For example, if a redaction policy is applied to a column of type BINARY_DOUBLE and the redaction type is full redaction, that column will be redacted with the value shown in the BINARY_DOUBLE_VALUE column of this view.

Column Datatype NULL Description
NUMBER_VALUE NUMBER NOT NULL Redaction result for full redaction on NUMBER columns
BINARY_FLOAT_VALUE BINARY_FLOAT NOT NULL Redaction result for full redaction on BINARY_FLOAT columns
BINARY_DOUBLE_VALUE BINARY_DOUBLE NOT NULL Redaction result for full redaction on BINARY_DOUBLE columns
CHAR_VALUE VARCHAR2(1)   Redaction result for full redaction on CHAR columns
VARCHAR_VALUE VARCHAR2(1)   Redaction result for full redaction on VARCHAR2 columns
NCHAR_VALUE NCHAR(1)   Redaction result for full redaction on NCHAR columns
NVARCHAR_VALUE NVARCHAR2(1)   Redaction result for full redaction on NVARCHAR2 columns
DATE_VALUE DATE NOT NULL Redaction result for full redaction on DATE columns
TIMESTAMP_VALUE TIMESTAMP(6) NOT NULL Redaction result for full redaction on TIMESTAMP columns
TIMESTAMP_WITH_TIME_ZONE_VALUE TIMESTAMP(6) WITH TIME ZONE NOT NULL Redaction result for full redaction on TIMESTAMP WITH TIME ZONE columns
BOOLEAN_VALUEFoot 1 BOOLEAN NOT NULL Redaction result for full redaction on BOOLEAN columns
BLOB_VALUE BLOB   Redaction result for full redaction on BLOB columns
CLOB_VALUE CLOB   Redaction result for full redaction on CLOB columns
NCLOB_VALUE NCLOB   Redaction result for full redaction on NCLOB columns

Footnote 1 This column is available starting with Oracle AI Database 26ai, Release Update 23.7, but it does not appear in this view by default. It is automatically added to this view when the value of the COMPATIBLE initialization parameter is 23.0.0 or higher, and a full redaction value for data type BOOLEAN is specified or a full redaction policy is defined on any column of BOOLEAN data type. See Oracle AI Database Data Redaction Guide for more information.

See Also: Oracle AI Database Data Redaction Guide for more information about Oracle Data Redaction