Skip Ribbon Commands
Skip to main content
Navigate Up
Sign In

Quick Launch

Average Rating:

(1 Rating)
facebook Twitter
Email
Print Bookmark Alert me when this article is updated

Feedback

FAQ: What are the steps for reverse masking and updating the masked columns is DDM?
Answer
This is the designed behavior of DDM where you cannot update based on the masked column:
 
For example,

Original database:
 
select * from table1
ID  Name cc_num
1   A     1234
 
With DDM:
 
select * from table1
ID   Name cc_num
1   A     5678
 
update table1 set name='B' where cc_num='5678' --------Doesn't work because of the designed behavior of DDM which cannot update based on the masked column
 
update table1 set name='B' where cc_num='1234' -------Works because it searches the source database with the actual column value but this defies the whole logic of security and the usage of DDM. 
 
update table1 set name='B' where id=1 ----------- Works if ID is not included in any of the security rules configured in DDM.
Note

If any column is configured in the security rules for DDM, then DDM cannot update based on those columns.

Attached is the rule export.


More Information

Applies To
Product: Dynamic Data Masking
Problem Type: Configuration
User Type: Developer; Administrator
Project Phase: Implement; Configure; Onboard
Product Version: Dynamic Data Masking 9.8.4
Database:
Operating System:
Other Software:

Reference

Attachments

Last Modified Date:3/22/2020 11:59 PMID:578891
People who viewed this also viewed

Feedback

Did this KB document help you?



What can we do to improve this information (2000 or fewer characters)