Enabling, disabling, and dropping policy
In this recipe, you'll learn to enable, disable, and drop transparent sensitive data protection policies.
Getting ready
To complete this recipe, you'll need two existing users-one to manage TSDP policies and the other to view sensitive data.
How to do it...
Connect to the database (for example,
pdb1
) as a user who has theSELECT
privilege on theHR.EMPLOYEES
table and theCHALLENGEZORAN.T1
table or theSELECT ANY TABLE
privilege (for example,maja
).$ sqlplus maja@pdb1
View sensitive data by executing the following two queries:
SELECT EMAIL FROM HR.EMPLOYEES FETCH FIRST 10 ROWS ONLY;
SELECT EMAIL_ADDRESS FROM CHALLENGEZORAN.T1;
Connect to the database (for example,
pdb1
) as a user who can manage TSDP policies (for example,c##zoran
). Enable the TSDP policy:Repeat step 2 as user
maja
.Result of the second query is shown in Figure 13: