Visualizações do sistema de mascaramento dinâmico de dados
Superusuários, usuários com a função sys:operator
e usuários com a permissão ACCESS SYSTEM TABLE podem acessar as visualizações de sistema relacionadas a DDM a seguir.
Use SVV_MASKING_POLICY para visualizar todas as políticas de mascaramento criadas no cluster ou grupo de trabalho.
-
Use SVV_ATTACHED_MASKING_POLICY para visualizar todas as relações e usuários ou funções com políticas anexadas no banco de dados atualmente conectado.
SYS_APPLIED_MASKING_POLICY_LOG
Use SYS_APPLIED_MASKING_POLICY_LOG para monitorar a aplicação de políticas de mascaramento em consultas que fazem referência a relações protegidas por DDM.
Veja a seguir alguns exemplos das informações que você pode encontrar usando as visualizações do sistema.
--Select all policies associated with specific users, as opposed to roles SELECT policy_name, schema_name, table_name, grantee FROM svv_attached_masking_policy WHERE grantee_type = 'user'; --Select all policies attached to a specific user SELECT policy_name, schema_name, table_name, grantee FROM svv_attached_masking_policy WHERE grantee = '
target_grantee_name
' --Select all policies attached to a given table SELECT policy_name, schema_name, table_name, grantee FROM svv_attached_masking_policy WHERE table_name = 'target_table_name
' AND schema_name = 'target_schema_name
'; --Select the highest priority policy attachment for a given role SELECT samp.policy_name, samp.priority, samp.grantee, smp.policy_expression FROM svv_masking_policy AS smp JOIN svv_attached_masking_policy AS samp ON samp.policy_name = smp.policy_name WHERE samp.grantee_type = 'role' AND samp.policy_name = mask_get_policy_for_role_on_column( 'target_schema_name
', 'target_table_name
', 'target_column_name
', 'target_role_name
') ORDER BY samp.priority desc LIMIT 1; --See which policy a specific user will see on a specific column in a given relation SELECT samp.policy_name, samp.priority, samp.grantee, smp.policy_expression FROM svv_masking_policy AS smp JOIN svv_attached_masking_policy AS samp ON samp.policy_name = smp.policy_name WHERE samp.grantee_type = 'role' AND samp.policy_name = mask_get_policy_for_user_on_column( 'target_schema_name
', 'target_table_name
', 'target_column_name
', 'target_user_name
') ORDER BY samp.priority desc; --Select all policies attached to a given relation. SELECT policy_name, schema_name, relation_name, database_name FROM sys_applied_masking_policy_log WHERE relation_name = 'relation_name' AND schema_name = 'schema_name';