Creating transparent sensitive data protection policy

This step defines the way you want to protect sensitive data. You can use Data Redaction or VPD settings for your TSDP policy. In this recipe, you'll use regular expression redaction to protect previously defined sensitive data.

Getting ready

To complete this recipe, you'll need an existing user who has the execute privilege on the dbms_tsdp_protect package (for example, c##zoran).

How to do it...

1. Connect to the database (for example, pdb1) as a user who has appropriate privileges (for example, c##zoran user):

   $ sqlplus c##zoran@pdb1
   

2. Create TSDP policy using Data Redaction.

   

   Figure 7 - TSDP policy using Oracle Data Redaction

How it works...

In step 2, lines 2 and 3 define variables redact_features_options and policy_conditions. Data redaction settings, for TSPD policy, are defined by using redact_features_options variable that holds parameter-value pairs that correspond with the parameters in DBMS_REDACT.ADD_POLICY procedure (lines 4-8). Line...