Altering transparent sensitive data protection policy

In this recipe, you'll alter policy you created in recipe Creating transparent sensitive data protection policy and enable it.

Getting ready

To complete this recipe, you'll need two existing users (for example, c##zoran and maja). Also, update the table hr.employees, as shown in Figure 20:

Figure 20 - Set new e-mail addresses in the hr.employees table

How to do it...

1. Connect to the database (for example, pdb1) as a user who can manage TSDP policies (for example, c##zoran):

   $ sqlplus c##zoran@pdb1
   

2. If the policy is enabled, disable it for all columns (for instructions how to disable the TSDP policy, see recipe Enabling, disabling, and dropping policy).

3. Connect to the database (for example, pdb1) as a user who can view sensitive data (for example, maja). Execute the following queries:

   SELECT EMAIL FROM HR.EMPLOYEES FETCH FIRST 10 ROWS ONLY;
   

   

   Figure 21 - Before altering and enabling the policy

          SELECT EMAIL_ADDRESS FROM CHALLENGEZORAN.T1;...