My Oracle Support Banner

RAS Column Level Security Overlap Does Not Work (Doc ID 2577626.1)

Last updated on AUGUST 29, 2019

Applies to:

Oracle Database - Enterprise Edition - Version 18.3.0.0.0 and later
Information in this document applies to any platform.

Symptoms

Implementing 2 RAS policies on the same table with both column level security on the same column prevent a user to see the content of that column, even with the needed privileges.

LASTNAME column is protected by multiple RAS policies

The expected output should be as below i.e Lastname column should be visible

SQL> connect
Z1234567/pwd
Connected.
SQL> select * from customers;

CUS_ID    CUS_Z    FIRSTNAME    LASTNAME      CUS_TYPE

---------- -------- -------------------- ------------------------------

5          Z1234571      abc              def        WEALTH

 

Due to product defect it shows no value for the LASTNAME column

 

SQL> connect
Z1234567/pwd
Connected.
SQL> select * from customers;

CUS_ID    CUS_Z           FIRSTNAME   LASTNAME               CUS_TYPE

---------- -------- -------------------- --------------------------------------------

5            Z1234571          abc     <<<>>       WEALTH

 

Here Z1234567 is a RAS user.

Changes

 RAS being implemented on the schema. With user having required privilege granted he should be able to see the column data. But unfortunately this could not be seen

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.