ORA-31696: unable to export/import TABLE_DATA:" schema.table" using client specified DIRECT_PATH method If you try to use the Oracle Data Pump Export ( EXPDP) utility with the access_method parameter set to direct_path to export data from a schema that contains an object that has a Data Redaction policy defined on it, then the following error message may appear and the export operation fails: If you are using Oracle Data Pump to perform full database export operations using the new Data Pump default settings ( direct_path), and if you receive error messages that you do not understand, then use this section to repeat the operation in such a way as to better understand the error. Oracle Virtual Private Database policies can be static, dynamic, and context sensitive, whereas Data Redaction policies only allow static and context-sensitive policy expressions.ĭata Redaction permits only one policy to be defined on a table or view, whereas you can define multiple Virtual Private Database policies on an object.ĭata Redaction is when application users try to access an object that is protected by a Data Redaction policy using a synonym, but (unlike Oracle Virtual Private Database) Data Redaction does not support the creation of policies directly on the synonyms themselves.Ħ.8 Oracle Data Redaction and the EXPDP Utility access_method Parameter Many applications cannot use NULL redacting, so Data Redaction is a good solution for these applications. Oracle Data Redaction provides more redacting features than Oracle Virtual Private Database, which only supports NULL redacting. Oracle Data Redaction differs from Oracle Virtual Private Database in the following ways: Oracle Virtual Private Database policies are unaffected by Oracle Data Redaction because the Virtual Private Database inline view, which contains the Virtual Private Database predicate, acts on actual values. Internally, Oracle Data Pump issues these kinds of operations, so you may also need to grant the EXEMPT REDACTION POLICY system privilege to a user if they need to perform schema-level exports of tables that have redacted columns.Ħ.6 Oracle Data Redaction and Oracle Virtual Private Database If a redacted column appears as the source in a DML or DDL operation, then Oracle Data Redaction considers this as an attempt to circumvent the policy and prevents it with an ORA-28081: Insufficient privileges - the command references a redacted object error unless you have the EXEMPT REDACTION POLICY system privilege. If your application performs further processing on the buffer that contains the RETURNING INTO value, then consider changing the application because it may not expect to find a redacted value in the buffer. The result that is sent to the buffer is what would have been displayed had the RETURNING INTO clause been run as an ordinary SQL query, rather than as part of a DML statement. Oracle Data Redaction treats the RETURNING INTO clause of a DML statement as a query, even though the result is not displayed. 6.1 Oracle Data Redaction and DML and DDL OperationsĪlthough you will use Oracle Data Redaction primarily for redacting the displayed results of application queries, you should understand of how it affects DML and DDL operations, especially if you have users who issue ad-hoc SQL against tables with redacted columns.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |