Re: Data Masking - auto generate scripts
- From: Niall Litchfield <niall.litchfield@xxxxxxxxx>
- To: "AGNIHOTRI, GOVIND B" <GA616Y@xxxxxxx>
- Date: Mon, 5 Jan 2015 16:12:55 +0000
Most probably hours.
On Mon, Jan 5, 2015 at 3:08 PM, AGNIHOTRI, GOVIND B <GA616Y@xxxxxxx> wrote:
> I have never used datamasking from oracle. I am curious on its
> performance. I have implemented several scripts to “scramble” PCI/PII
> data for a snapshot DB on physical standby and flash back to undo the
> changes after the test. Lets say for a table with 60 mill email
> scramble, would it take secs or hours?
>
>
>
> *From:* oracle-l-bounce@xxxxxxxxxxxxx [mailto:
> oracle-l-bounce@xxxxxxxxxxxxx] *On Behalf Of *Ethan Post
> *Sent:* Wednesday, December 31, 2014 6:55 PM
> *To:* Niall Litchfield
> *Cc:* Backseat DBA; oracle-l@xxxxxxxxxxxxx
> *Subject:* Re: Data Masking - auto generate scripts
>
>
>
> You could write a script that always check permissions and put them back
> or barks if there is an issue before running the dm scripts. A hack if that
> is the main issue not too hard to automate and implement. I have had to
> play with DM in 11.2.0.2 lately and it is far from intuitive or impressive.
> There is a business opportunity here for a decent software developer I am
> sure.
>
>
>
> On Wed, Dec 31, 2014 at 3:10 AM, Niall Litchfield <
> niall.litchfield@xxxxxxxxx> wrote:
>
> In EM 12.1.0.4 (not sure about 12.1.0.3 but its trivial to check) there's
> a generate_masking_script verb for emcli. That would seem to fit the bill.
>
>
>
> On Tue, Dec 30, 2014 at 11:35 PM, Jeff C <backseatdba@xxxxxxxxx> wrote:
>
> Is there a way to schedule generating a masking script? Or better yet,
> scheduling a script generation and executing the script. In EM 11 and 12
> it seems that you have to pre-create the script. This has caused some
> problems because the script finds all the table permissions and revokes and
> re-grants permissions. But if I remove a permission but forgot to
> regenerate a script the whole masking script fails with something like:
> can't revoke permission not granted.
>
> I want to automate the whole thing. I currently have a script on a
> schedule to use rman duplicate to create a clone of my database. Then I
> want to schedule the masking to happen right after that is done. I don't
> have a license for the Provisioning pack, but if that is the only way this
> is possible then I will have to try to get that approved but that wont be
> easy.
>
> EE 11.2.0.2 w/ Masking Pack
> Windows Server 2008R2
>
> Enterprise Manager 11g is currently where my Masking definitions are but I
> am working on converting them to my 12.1.0.3 setup of EM.
>
> Thanks,
>
> Jeff
>
>
>
>
>
> --
>
> Niall Litchfield
> Oracle DBA
> http://www.orawin.info
>
>
>
--
Niall Litchfield
Oracle DBA
http://www.orawin.info
Other related posts:
