My Oracle Support Banner

Data Redaction Error While Doing An Expdp: ORA-28081: Insufficient privileges - the command references a redacted object. (Doc ID 1631729.1)

Last updated on NOVEMBER 14, 2016

Applies to:

Oracle Database - Enterprise Edition - Version 11.2.0.4 and later
Information in this document applies to any platform.

Symptoms

On : 11.2.0.4 version, Database Security

When attempting to export a table which is protected by Oracle Data redaction Policy
the following error occurs.

ERROR
-----------------------
ORA-28081: Insufficient privileges - the command references a redacted object.


STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. create table SIEBEL.S_CONTACT (contact_id number, WORK_PH_NUM varchar2(10));
2. Insert into SIEBEL.S_CONTACT values ('1','01037541'); commit;
3.BEGIN
  DBMS_REDACT.ADD_POLICY(
  object_schema => 'SIEBEL',
  object_name => 'S_CONTACT',
  column_name => 'WORK_PH_NUM',
  policy_name => 'REDACT_WORK_PH_NUM',
  function_type => DBMS_REDACT.PARTIAL,
  function_parameters => 'VVVVVVVVVV,VVVVVVVVVV,X,1,6',
  expression => 'SYS_CONTEXT(''USERENV'',''SESSION_USER'')=''REDACTEST1''',
  policy_description => 'Redacts WORK_PH_NUM with character X',
  column_description => 'SSN contains character WORK_PH_NUM');
END;
/

4. expdp system/welcome1 TABLES=SIEBEL.S_CONTACT DIRECTORY=DATA_PUMP_DIR DUMPFILE=exp_S_CONTACT_enc.dmp LOGFILE=exp_S_CONTACT_enc.log

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


This document is being delivered to you via Oracle Support's Rapid Visibility (RaV) process and therefore has not been subject to an independent technical review.
My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.