Create the third and final rule set for masking XML data types in a result set. Give the rule set the name that you specified in the previous rule set when you selected the Content Masking action. Then create the rules that directly process the XML data itself. Finally, create a rule within this rule set to apply the masking function.
To create a security rule set, click on a domain node in the rule tree.
Click
Tree
Add Rule Set
.
The
Add Rule Set
window appears.
Enter the name of the security rule set that you gave as the
Ruleset Name for Resultset
property in the previous step. For example, "MaskEmpXMLData."
Click
OK
.
Within this rule set, create a rule or rules to match the XML content that you want to mask.
In the Management Console, click the security rule set that you created in the previous step.
Select
Tree
Security Rule Set
.
The
Rule Editor
appears.
Click
Action
Append Rule
.
The
Append Rule
window appears.
Enter a name for the rule, for example, "EmpNameXPathRule."
For the
Matching Method
, select
Metadata
.
For
Content Type
, select
XPath
.
In the Text box, provide the XPath expression to match the XML elements that you want to mask. For example:
/Personnel/Employee/Name
For
Action Type
, select
Masking
.
For
Data Type
, select
String
.
For
Masking Type
, select the type of masking that you want to apply to the data. You can choose from pattern, redaction, or constant masking.
For more information about the Masking action, the masking types, and their parameters, see
Security Rules.
For the
Processing Action
, select
Continue
.
Click
OK.
Select
File
Update Rules
to save the rule in the rule tree.
Optionally, you can create additional rules within this rule set on other XPath expressions.
When you are finished creating the rules that match the XML data and configure the type of masking, create a final rule to apply the masking. This rule is mandatory and must be the final rule in the rule set.
Select
Tree
Security Rule Set
.
The
Rule Editor
appears.
Click
Action
Append Rule
.
The
Append Rule
window appears.
Enter a name for the final rule, for example, "ApplyMasking."