Oracle | DBMS_RAT

Oracle DBMS_RAT_MASK Version 21c

General Information

Library Note

Morgan's Library Page Header

Which has the higher priority in your organization: Deploying a new database or securing the ones you already have? Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.

Purpose Recovery Appliance (Recovery Appliance) Backup and Recovery Support for data masking with workload captures and replays.

AUTHID CURRENT_USER

Dependencies

DBMS_RAT_MASK_INTERNAL

XMLTYPE

Documented No

First Available 12.1

Security Model Owned by SYS with EXECUTE granted to the DBA role

Source {ORACLE_HOME}/rdbms/admin/dbmsratmask.sql

Subprograms

AWR_PURGE_BINDS	DBR_MASK_DATA	REMOVE_SPA_PEEKED_BINDS
CLEANUP_MASKING	GET_RAT_VERSION	SPA_EXTRACT_DATA
DBR_EXTRACT_DATA	INITIALIZE_MASKING	SPA_MASK_DATA

AWR_PURGE_BINDS

Runs an update statement to delete peeked binds from the other_xml of the AWR plans table dbms_rat_mask.awr_purge_binds;

exec dbms_rat_mask.awr_purge_binds;

      

      PL/SQL procedure successfully completed.

CLEANUP_MASKING

Removes data from all catalog tables related to the script id dbms_rat_mask.cleanup_masking(script_id IN NUMBER);

TBD

DBR_EXTRACT_DATA

API for the extract phase of rat masking for capture files. It makes a call out to the kernel function which iterates over each statement in each capture file and extracts all sensitive bind values. dbms_rat_mask.dbr_extract_data( capture_directory IN VARCHAR2, script_id IN NUMBER);

TBD

DBR_MASK_DATA

API for the mask phase of rat masking for capture files. It makes a call out to the kernel function which iterates over each stmt in each cap file and replaces the values of all sensitive binds with masked values. It also removes binds in AWR. dbms_rat_mask.dbr_mask_data( capture_directory IN VARCHAR2, script_id IN NUMBER);

TBD

GET_RAT_VERSION

Returns the version of kernel code of RAT masking dbms_rat_mask.get_rat_version RETURN NUMBER;

SELECT dbms_rat_mask.get_rat_version

      FROM dual;

      

      GET_RAT_VERSION

      ---------------

                    1

INITIALIZE_MASKING

Initialize a rat masking run dbms_rat_mask.initialize( user_name IN VARCHAR2, -- user executing the masking script package_name IN VARCHAR2, -- name of masking package mask_definition IN XMLTYPE, -- xml of masking definition control_xml IN XMLTYPE DEFAULT NULL); -- control xml from masking definition

TBD

REMOVE_SPA_PEEKED_BINDS

Removes peeked binds from the advisor plans table dbms_rat_mask.remove_spa_peeked_binds(task_id IN NUMBER);

SELECT task_id, task_name

      FROM dba_advisor_tasks

      WHERE advisor_name = 'SQL Tuning Advisor';

      

       TASK_ID TASK_NAME

      -------- -------------------------

             1 SYS_AUTO_SQL_TUNING_TASK

      

      exec dbms_rat_mask.remove_spa_peeked_binds(1);

      

      PL/SQL procedure successfully completed.

SPA_EXTRACT_DATA

API for the extract phase of rat masking for SQL tuning sets. It makes a call out to the kernel function which iterates over each statement in each STS in the db and extracts all sensitive bind values. dbms_rat_mask.spa_extract_data(spa_extract_data(script_id IN NUMBER);

TBD

SPA_MASK_DATA

API for the mask phase of rat masking for SQL tuning sets. It makes a call out to the kernel function which iterates over each stmt in each STS in the db and replaces the values of all sensitive binds with masked values. It also removes peeked binds present in the other_xml column of the plan lines table. dbms_rat_mask.spa_mask_data(spa_mask_data(script_id IN NUMBER);

TBD