Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does Oracle Label Security provide column-level access control?

April 26, 2017CONTROL Label Oracle security

0

Posted

Does Oracle Label Security provide column-level access control?

1 Answer

0

Posted

No, Oracle Label Security is not column aware. This behavior is available with Virtual Private Database (VPD). A VPD policy can be written so that it only becomes active when a certain column is part of a SQL statement against a protected table. If the column sensitivity switch is on, then VPD either returns only those rows for which the sensitive column values are accessible to the user, or it returns all rows with all cells in the sensitive column being empty, except those values that the user is allowed to see. The following link on the Oracle Technology Network Web site contains an example: http://www.oracle.com/technology/deploy/security/database-security/virtual-private-database/index.html A column-sensitive VPD policy can determine access to a specific column by evaluating OLS user labels.