Introduction

Oracle Transparent Sensitive Data Protection (TSDP) is a new security feature, introduced in Oracle Database 12c (available only in Enterprise Edition). TSDP provides a way to create classes of sensitive data and enables more centralized control of how sensitive data is protected. In database versions 12.1.0.1 and 12.1.0.2, it leverages two Oracle security mechanisms:

• Oracle Virtual Private Database (VPD), described in Chapter 4, Virtual Private Database
• Oracle Data Redaction, explained in Chapter 5, Data Redaction

To implement TSDP, you should complete steps shown in Figure 1:

Figure 1 - Steps to implement TSDP

For all recipes in this chapter, we assume that the database is up and running and each user has at least a create session privilege. In this chapter, it is assumed that user c##zoran has a DBA role and it executes privileges on the following packages:

• DBMS_TSDP_MANAGE
• DBMS_TSDP_PROTECT
• DBMS_RLS
• DBMS_REDACT

Recipes are tested on Oracle Database 12.1.0.2 in multitenant and non...