Yes it can be done. The function will be run by every user selecting from the table, so execute on the function should be granted to public. Within the function you can check for a list of hard coded users, or have it lookup the data in a table (which should be protected against changes using fga) or you can use a db role that can be granted to users, and check dba/all_role_privs. Ken From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of J. Dex Sent: Tuesday, October 20, 2009 11:10 AM To: oracle-l@xxxxxxxxxxxxx Subject: VPD with column masking Using VPD with column masking, is it possible to set up a function/policy so it only applies to a small percentage of the users in the database? I have a main schema with all the tables under that schema. I want a few of the users (not everyone) to only be able to look at some of the data that resides in those tables under that main schema. Is it possible to apply a function and policy to work that way? What is the best way to do that? _____ Hotmail: Free, trusted and rich email service. Get it <http://clk.atdmt.com/GBL/go/171222984/direct/01/> now.