Data Redaction Error While Doing An Expdp: ORA-28081: Insufficient privileges - the command references a redacted object. (Doc ID 1631729.1)

Last updated on NOVEMBER 14, 2016

Applies to:

Oracle Database - Enterprise Edition - Version 11.2.0.4 and later
Information in this document applies to any platform.

Symptoms

On : 11.2.0.4 version, Database Security

When attempting to export a table which is protected by Oracle Data redaction Policy
the following error occurs.

ERROR
-----------------------
ORA-28081: Insufficient privileges - the command references a redacted object.


STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. create table SIEBEL.S_CONTACT (contact_id number, WORK_PH_NUM varchar2(10));
2. Insert into SIEBEL.S_CONTACT values ('1','01037541'); commit;
3.BEGIN
  DBMS_REDACT.ADD_POLICY(
  object_schema => 'SIEBEL',
  object_name => 'S_CONTACT',
  column_name => 'WORK_PH_NUM',
  policy_name => 'REDACT_WORK_PH_NUM',
  function_type => DBMS_REDACT.PARTIAL,
  function_parameters => 'VVVVVVVVVV,VVVVVVVVVV,X,1,6',
  expression => 'SYS_CONTEXT(''USERENV'',''SESSION_USER'')=''REDACTEST1''',
  policy_description => 'Redacts WORK_PH_NUM with character X',
  column_description => 'SSN contains character WORK_PH_NUM');
END;
/

4. expdp system/welcome1 TABLES=SIEBEL.S_CONTACT DIRECTORY=DATA_PUMP_DIR DUMPFILE=exp_S_CONTACT_enc.dmp LOGFILE=exp_S_CONTACT_enc.log

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms