MaskedProductionData
Hi
While moving the data from production to staging or development test environment, what is the best way to mask some columns of some tables?
The two option I can think of are:
(A) Apply redaction policy as it is in built in oracle 12c
(B) Export data then apply script on columns the move the data to test environment.
Which of the two ways will be better?
If I go with (A) then I apply the redact.add_policy. But will this be automatically applied on the exported data?
While moving the data from production to staging or development test environment, what is the best way to mask some columns of some tables?
The two option I can think of are:
(A) Apply redaction policy as it is in built in oracle 12c
(B) Export data then apply script on columns the move the data to test environment.
Which of the two ways will be better?
If I go with (A) then I apply the redact.add_policy. But will this be automatically applied on the exported data?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you for reply. So we cannot export data in redacted state.
Then how can we ensure it is redacted in the first place?
Then how can we ensure it is redacted in the first place?
ASKER
To export the metadata related to the policies of the Oracle Data Redaction, you can use the following parameters of the expdp utility: CONTENT=METADATA_ONLY INCLUDE=RADM_FPTM,RADM_POL
>>But the original data exported.
I believe the original data will remain un-redacted and the import will then import the policy to show it as redacted to the unprivileged users but you should need to do a quick test to confirm this.
>>Then how can we ensure it is redacted in the first place?
Query it as a non-privileged user? Oracle doesn't redact in place. The original data is still there. It just masks it a query time for users that don't have permission to see it.
I believe the original data will remain un-redacted and the import will then import the policy to show it as redacted to the unprivileged users but you should need to do a quick test to confirm this.
>>Then how can we ensure it is redacted in the first place?
Query it as a non-privileged user? Oracle doesn't redact in place. The original data is still there. It just masks it a query time for users that don't have permission to see it.
ASKER
Thank you very much for reply.
ASKER