RLS Policy Prevents Invocation Of Existing FGA Policy Under Certain Conditions
(Doc ID 1422068.1)
Last updated on OCTOBER 10, 2022
Applies to:Oracle Database - Enterprise Edition - Version 126.96.36.199 to 188.8.131.52 [Release 11.2]
Information in this document applies to any platform.
You may be experiencing a problem if you have a table which has an FGA policy with an audit_column defined and also a "column masking" RLS policy defined on the table which has a sec_relevant_column which is the same as the audit_column. In this case it is possible that an FGA audit record does not get written even though the audit_column is referenced in the SQL statement.
FGA and VPD polices pertaining to the same column were created.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document