Thanks for the question, Venkat.
Asked: October 19, 2016 - 7:24 pm UTC
Last updated: October 21, 2016 - 1:38 am UTC
Version: 12
Viewed 1000+ times
You Asked
Let's say I have a table T with columns A, B, C and D. Data in each column by itself is not considered sensitive, but a combination of columns A,B,C in the same resultset is considered sensitive. Is it possible to allow queries that select A,B,D or A,C,D or B,C,D to return data but not allow queries that select columns A,B,C (with or without D)? A query that uses this table along with others needs to satisfy the same requirements.
Thanks!
and Connor said...
Sorry - I am unaware of any facility to do that.
DBMS_RLS lets you choose columns upon which a row limiting or masking policy becomes activated, but that is a ANY rather than ALL condition, ie,
sec_relevant_cols=>'A,B,C'
means *any* of those columns referenced in the query.
I'll publish this so anyone with some suggestions can add their thoughts.
Rating
(2 ratings)
Is this answer out of date? If it is, please let us know via a Comment