RLS Policy Prevents Invocation Of Existing FGA Policy Under Certain Conditions
(Doc ID 1422068.1)
Last updated on FEBRUARY 04, 2020
Applies to:Oracle Database - Enterprise Edition - Version 184.108.40.206 to 220.127.116.11 [Release 11.2]
Information in this document applies to any platform.
You may be experiencing a problem if you have a table which has an FGA policy with an audit_column defined and also a "column masking" RLS policy defined on the table which has a sec_relevant_column which is the same as the audit_column. In this case it is possible that an FGA audit record does not get written even though the audit_column is referenced in the SQL statement.
FGA and VPD polices pertaining to the same column were created.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document