Enabling, disabling, and dropping policy

In this recipe, you'll learn to enable, disable, and drop transparent sensitive data protection policies.

Getting ready

To complete this recipe, you'll need two existing users-one to manage TSDP policies and the other to view sensitive data.

How to do it...

1. Connect to the database (for example, pdb1) as a user who has the SELECT privilege on the HR.EMPLOYEES table and the CHALLENGEZORAN.T1 table or the SELECT ANY TABLE privilege (for example, maja).

   $ sqlplus maja@pdb1
   

2. View sensitive data by executing the following two queries:

   SELECT EMAIL FROM HR.EMPLOYEES FETCH FIRST 10 ROWS ONLY;
   

   

   Figure 9 - Before enabling the policy

   SELECT EMAIL_ADDRESS FROM CHALLENGEZORAN.T1;
   

   

   Figure 10 - Before enabling the policy

3. Connect to the database (for example, pdb1) as a user who can manage TSDP policies (for example, c##zoran). Enable the TSDP policy:

   

4. Repeat step 2 as user maja.

   

   Figure 12 - Sensitive data is protected

5. Result of the second query is shown in Figure 13:

   

   Figure...