OraFAQ Forum: Security » Column Masking for various levels of users

Home » RDBMS Server » Security » Column Masking for various levels of users

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Column Masking for various levels of users [message #142110]

Thu, 13 October 2005 08:54

anilhyd
Messages: 10
Registered: October 2005

Junior Member

Hi,

Would like to know the options available in Oracle for masking the column display for various users in various levels. The following example explains the same :-

We have a table T1 and it has three columns - c1,c2,c3,c4

User1 should be able to see c1,c2 (level 1 user)
User2 should be able to see c1,c2,c3 (level 2 user)
User3 should be able to see c1,c2,c3,c4 (level 3 user)

All users shall run the same query "Select * from T1" but they should get different output based on their levels.

Can this be implemented using DBMS_RLS (as dbms_rls deals more about row level and column level security. Is there only column masking available in dbms_rsl. If yes are there any examples on implementation.)

Thanks in Advance
Anil..

Report message to a moderator

Re: Column Masking for various levels of users [message #142115 is a reply to message #142110]

Thu, 13 October 2005 08:59

Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille

Senior Member
Account Moderator

The row-level security as you said
or
a simple view would do the job.

Report message to a moderator

Re: Column Masking for various levels of users [message #142118 is a reply to message #142115]

Thu, 13 October 2005 09:03

anilhyd
Messages: 10
Registered: October 2005

Junior Member

Thanks for the quick response. We are planning to implement using views. But due some problem in reporting tools/existing queries, would like to find out is there any other oracle provided utility (other than view creation).

There is no row level security and only column level masking. Hence would like whether it is possible through dbms_rls and if yes, what is the process.

Regards
Anil..

Report message to a moderator

Re: Column Masking for various levels of users [message #142127 is a reply to message #142118]

Thu, 13 October 2005 09:22

Mahesh Rajendran
Messages: 10708
Registered: March 2002
Location: oracleDocoVille

Senior Member
Account Moderator

>> But due some problem in reporting tools
There are several options in reports to hide a column. Please look into it.
That would work only if the user connects through the reports.

The easiest and reliable solution is to use views.
create a FULLBASE view on T1
create all other views on FULLBASE view.
Grant access to any users according. The highest level of access should be on FULLBASE.

Report message to a moderator

Re: Column Masking for various levels of users [message #142342 is a reply to message #142110]

Fri, 14 October 2005 04:19

anilhyd
Messages: 10
Registered: October 2005

Junior Member

Thank you....

Report message to a moderator

Previous Topic:	Audit Responsibilities
Next Topic:	I Need a help

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu May 01 12:57:40 CDT 2025