VPD Policy Restriction not working in Update command (Doc ID 2084417.1)

Last updated on FEBRUARY 04, 2016

Applies to:

Oracle Database - Enterprise Edition - Version 11.2.0.1 and later
Information in this document applies to any platform.

Symptoms

VPD policy defined with update_check= TRUE ,sec_relevant_cols ='ssn' and sec_relevant_cols_opt => DBMS_RLS.ALL_ROWS.

Here VPD policy restriction is bypassed by updating another dummy column to the sensitive protected column 'ssn' value and then querying the dummy column.

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms