Home » RDBMS Server » Security » Column Masking for various levels of users
icon2.gif  Column Masking for various levels of users [message #142110] Thu, 13 October 2005 08:54 Go to next message
anilhyd
Messages: 10
Registered: October 2005
Junior Member
Hi,

Would like to know the options available in Oracle for masking the column display for various users in various levels. The following example explains the same :-

We have a table T1 and it has three columns - c1,c2,c3,c4

User1 should be able to see c1,c2 (level 1 user)
User2 should be able to see c1,c2,c3 (level 2 user)
User3 should be able to see c1,c2,c3,c4 (level 3 user)

All users shall run the same query "Select * from T1" but they should get different output based on their levels.

Can this be implemented using DBMS_RLS (as dbms_rls deals more about row level and column level security. Is there only column masking available in dbms_rsl. If yes are there any examples on implementation.)

Thanks in Advance
Anil..
Re: Column Masking for various levels of users [message #142115 is a reply to message #142110] Thu, 13 October 2005 08:59 Go to previous messageGo to next message
Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille
Senior Member
Account Moderator
The row-level security as you said
or
a simple view would do the job.
Re: Column Masking for various levels of users [message #142118 is a reply to message #142115] Thu, 13 October 2005 09:03 Go to previous messageGo to next message
anilhyd
Messages: 10
Registered: October 2005
Junior Member
Thanks for the quick response. We are planning to implement using views. But due some problem in reporting tools/existing queries, would like to find out is there any other oracle provided utility (other than view creation).

There is no row level security and only column level masking. Hence would like whether it is possible through dbms_rls and if yes, what is the process.

Regards
Anil..
Re: Column Masking for various levels of users [message #142127 is a reply to message #142118] Thu, 13 October 2005 09:22 Go to previous messageGo to next message
Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille
Senior Member
Account Moderator
>> But due some problem in reporting tools
There are several options in reports to hide a column. Please look into it.
That would work only if the user connects through the reports.

The easiest and reliable solution is to use views.
create a FULLBASE view on T1
create all other views on FULLBASE view.
Grant access to any users according. The highest level of access should be on FULLBASE.
Re: Column Masking for various levels of users [message #142342 is a reply to message #142110] Fri, 14 October 2005 04:19 Go to previous message
anilhyd
Messages: 10
Registered: October 2005
Junior Member
Thank you....
Previous Topic: Audit Responsibilities
Next Topic: I Need a help
Goto Forum:
  


Current Time: Wed Dec 04 20:18:26 CST 2024