Oracle | DBMS_RAT_MASK

Oracle DBMS_RAT_MASK_INTERNAL Version 21c

General Information

Library Note

Morgan's Library Page Header

ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling complimentary technical Workshops on Database Security for the first 30 Oracle Database customers located anywhere in North America, EMEA, LATAM, or APAC that send an email to asra_us@oracle.com. Request a Workshop for your organization today.

Purpose Recovery Appliance (Recovery Appliance) Backup and Recovery Support for data masking with workload captures and replays.

AUTHID DEFINER

Dependencies

DBA_WORKLOAD_CAPTURES	DBMS_WORKLOAD_REPLAY	WRH$_SQL_PLAN
DBMS_RAT_MASK	DBMS_WRR_INTERNAL	WRI$_MASKING_SCRIPT_PROGRESS
DBMS_SQLTUNE_LIB	DUAL	WRR$_CAPTURES
DBMS_STANDARD	PRVT_SMGUTIL	WRR$_REPLAYS
DBMS_SYS_ERROR	V$DATABASE	XMLTYPE
DBMS_WORKLOAD_CAPTURE	WRH$_SQLSTAT

Documented No

First Available 12.1

Security Model Owned by SYS with no privileges granted.

Direct access to some objects in this package is prevented by means of an Accessible By clause forcing access through DBMS_RAT_MASK.

Source {ORACLE_HOME}/rdbms/admin/dbmsratmask.sql

Subprograms

I_AWR_PURGE_BINDS	I_DBR_MASK_DATA	I_REMOVE_SPA_PEEKED_BINDS
I_CLEANUP_MASKING	I_GET_RAT_VERSION	I_SPA_EXTRACT_DATA
I_DBR_EXTRACT_DATA	I_INITIALIZE_MASKING	I_SPA_MASK_DATA

I_AWR_PURGE_BINDS

Runs an update statement to delete peeked binds from the other_xml of the AWR plans table exec dbms_rat_mask_internal.i_awr_purge_binds;

TBD

I_CLEANUP_MASKING

Removes data from all catalog tables related to the script id dbms_rat_mask_internal.i_cleanup_masking(script_id IN NUMBER);

TBD

I_DBR_EXTRACT_DATA

API for the extract phase of rat masking for capture files. It makes a call out to the kernel function which iterates over each statement in each capture file and extracts all sensitive bind values. dbms_rat_mask_internal.i_dbr_extract_data( capture_directory IN VARCHAR2, script_id IN NUMBER);

TBD

I_DBR_MASK_DATA

API for the mask phase of rat masking for capture files. It makes a call out to the kernel function which iterates over each stmt in each cap file and replaces the values of all sensitive binds with masked values. It also removes binds in AWR. dbms_rat_mask_internal.i_dbr_mask_data( capture_directory IN VARCHAR2, script_id IN NUMBER);

TBD

I_GET_RAT_VERSION

Returns the version of kernel code of RAT masking

Protected by an ACCESSIBLE BY clause dbms_rat_mask_internal.i_get_rat_version RETURN NUMBER;

SELECT dbms_rat_mask_internal.i_get_rat_version

      FROM dual;

             *

      ERROR at line 1:

      ORA-06553: PLS-904: insufficient privilege to access object 
      DBMS_RAT_MASK_INTERNAL

I_INITIALIZE_MASKING

Initialize a rat masking run dbms_rat_mask_internal.i_initialize_masking( user_name IN VARCHAR2, -- user executing the masking script package_name IN VARCHAR2, -- name of masking package mask_definition IN XMLTYPE, -- xml of masking definition control_xml IN XMLTYPE DEFAULT NULL); -- control xml from masking definition

TBD

I_REMOVE_SPA_PEEKED_BINDS

Removes peeked binds from the advisor plans table dbms_rat_mask_internal.i_remove_spa_peeked_binds(task_id IN NUMBER);

TBD

I_SPA_EXTRACT_DATA

API for the extract phase of rat masking for SQL tuning sets. It makes a call out to the kernel function which iterates over each statement in each STS in the db and extracts all sensitive bind values. dbms_rat_mask_internal.i_spa_extract_data(script_id IN NUMBER);

TBD

I_SPA_MASK_DATA

API for the mask phase of rat masking for SQL tuning sets. It makes a call out to the kernel function which iterates over each stmt in each STS in the db and replaces the values of all sensitive binds with masked values. It also removes peeked binds present in the other_xml column of the plan lines table. dbms_rat_mask_internal.i_spa_mask_data(script_id IN NUMBER);

TBD