Re: Data Masking - auto generate scripts
Date: Mon, 5 Jan 2015 16:12:55 +0000
Message-ID: <CABe10saicbS2c27BdtNw_zEyAdnQt_jL1_gt3UJHfqk2JmF1xw_at_mail.gmail.com>
Most probably hours.
On Mon, Jan 5, 2015 at 3:08 PM, AGNIHOTRI, GOVIND B <GA616Y_at_att.com> wrote:
> I have never used datamasking from oracle. I am curious on its
> performance. I have implemented several scripts to “scramble” PCI/PII
> data for a snapshot DB on physical standby and flash back to undo the
> changes after the test. Lets say for a table with 60 mill email
> scramble, would it take secs or hours?
>
>
>
> *From:* oracle-l-bounce_at_freelists.org [mailto:
> oracle-l-bounce_at_freelists.org] *On Behalf Of *Ethan Post
> *Sent:* Wednesday, December 31, 2014 6:55 PM
> *To:* Niall Litchfield
> *Cc:* Backseat DBA; oracle-l_at_freelists.org
> *Subject:* Re: Data Masking - auto generate scripts
>
>
>
> You could write a script that always check permissions and put them back
> or barks if there is an issue before running the dm scripts. A hack if that
> is the main issue not too hard to automate and implement. I have had to
> play with DM in 11.2.0.2 lately and it is far from intuitive or impressive.
> There is a business opportunity here for a decent software developer I am
> sure.
>
>
>
> On Wed, Dec 31, 2014 at 3:10 AM, Niall Litchfield <
> niall.litchfield_at_gmail.com> wrote:
>
> In EM 12.1.0.4 (not sure about 12.1.0.3 but its trivial to check) there's
> a generate_masking_script verb for emcli. That would seem to fit the bill.
>
>
>
> On Tue, Dec 30, 2014 at 11:35 PM, Jeff C <backseatdba_at_gmail.com> wrote:
>
> Is there a way to schedule generating a masking script? Or better yet,
> scheduling a script generation and executing the script. In EM 11 and 12
> it seems that you have to pre-create the script. This has caused some
> problems because the script finds all the table permissions and revokes and
> re-grants permissions. But if I remove a permission but forgot to
> regenerate a script the whole masking script fails with something like:
> can't revoke permission not granted.
>
> I want to automate the whole thing. I currently have a script on a
> schedule to use rman duplicate to create a clone of my database. Then I
> want to schedule the masking to happen right after that is done. I don't
> have a license for the Provisioning pack, but if that is the only way this
> is possible then I will have to try to get that approved but that wont be
> easy.
>
> EE 11.2.0.2 w/ Masking Pack
> Windows Server 2008R2
>
> Enterprise Manager 11g is currently where my Masking definitions are but I
> am working on converting them to my 12.1.0.3 setup of EM.
>
> Thanks,
>
> Jeff
>
>
>
>
>
> --
>
> Niall Litchfield
> Oracle DBA
> http://www.orawin.info
>
>
>
-- Niall Litchfield Oracle DBA http://www.orawin.info -- http://www.freelists.org/webpage/oracle-lReceived on Mon Jan 05 2015 - 17:12:55 CET