Oracle includes basic security for managing user access through roles and privileges.
These can be managed through Enterprise Manager
- on a local basis or
- on a global basis
by leveraging Oracle's enterprise user security, a feature in the Advanced Security Option.
Database security features allow you to implement a Virtual Private Database (VPD) using Oracle by creating and
attaching policies to database tables, views, or synonyms. These policies are then enforced by placing a predicate WHERE clause on SELECT, INSERT, UPDATE, DELETE, and/or INDEX statements.
New in Oracle Database 12c, you can redact or mask data queried by users or applications, taking into account assigned privileges. Full data redaction, partial data redaction, or random data redaction of specified columns in tables or views is supported.
Many organizations face the need to meet more stringent compliance requirements for improved data protection, although database usage now can extend beyond organizational boundaries. Oracle has added several options to the database to enable secure
deployment in such challenging environments.
These options include the
- Advanced Security Option,
- Label Security Option,
- Database Vault Option,
- Audit Vault and
- Database Firewall Option.