Table of Contents

Search

  1. Preface
  2. Introduction to Dynamic Data Masking
  3. Rules
  4. Connection Rules
  5. Security Rules
  6. Security Rule Set Simulator
  7. Masking Functions
  8. Glossary

Simulating a Rule

Simulating a Rule

Use the Security Rule Set Simulator to test a Dynamic Data Masking security rule before you use it in production.
  1. In the Management Console, open a security rule set.
  2. In the Rule Editor, select the rule, folder, or rule set that you want to test.
    For example, if you want to test the entire rule set, click the rule set name. If you want to test rules in a rule folder, click the folder name. If you want to test a single rule, click the rule name.
  3. Click
    Action
    Security Rule Set Simulator
    .
    The
    Security Rule Set Simulator
    opens.
  4. Enter the following database details:
    DDM Database Name
    The name of the database that you saved in the Management Console tree.
    DBA Username
    The name of the database user that you want to use to connect to the database. The user should be a privileged user that has access to all the tables in the database. Generally it is the user that you used to connect to the database in the Management Console.
    If you want to test the rule for a non-privileged user, enter login information for a privileged user and enter the non-privileged username in the AUTH_USERNAME symbol in the
    Symbol Definition
    box.
    DBA Password
    The password for the database user.
  5. Optionally, enter one or more symbol values in the
    Symbol Definition
    box. The simulator lists the global symbols. To add a symbol, click the plus (+) button.
    If you want to validate whether the security rule works for a non-privileged user, enter the database user name of the non-privileged user as the AUTH_USERNAME symbol value.
  6. Enter the SQL statement that you want to use to test the rule or rules.
  7. Click
    Run
    .
    The simulator runs and displays the log information in the
    Log Output
    box.
  8. If you want to save the simulator configuration and the log output, click
    Save File
    . Dynamic Data Masking does not save the simulator log output to the Dynamic Data Masking log files.