Stored Procedure Accelerator Guide for Sybase

Stored Procedure Accelerator Guide for Sybase

Masking Stored Procedures

Masking Stored Procedures

Dynamic Data Masking uses a Java Action security rule to determine whether an incoming statement is a call to a stored procedure. The Java Action rewrites the call to the stored procedure so that the masking rules can use the result set structures.
To mask stored procedure outputs, Dynamic Data Masking dynamically creates tables within the Sybase ASE database based on the structure of the result set. You define the temporary database and schema as symbols in the security rule set. Dynamic Data Masking creates tables in the temporary database and schema. Dynamic Data Masking then populates the table with data in the temporary database. Dynamic Data Masking names the tables in the temporary database in the following way:
DDM_<Procedure Name>_<unique long number for call>_<result set sequence number>
For example, a table in the temporary database might have the following name:
DDM_Proc_Dept_Emp_1426236444222_0
The unique long number for call and the result set sequence number are automatically generated numbers.
For each result set that the procedure returns, Dynamic Data Masking creates a new table in the temporary database and populates the table with data. Dynamic Data Masking then forms a select query for the table in the temporary database and masks the query based on the security rules. Dynamic Data Masking creates a temporary stored procedure in the temporary database that uses the masked select query. The client receives the results of the temporary stored procedure call.

Stored Procedure Names with Semicolons

Sybase table names cannot contain a semicolon (;). If the stored procedure name contains a semicolon, Dynamic Data Masking changes the semicolon to an underscore (_) in the temporary database.
When you enter the table name to mask in the stored procedure masking rules, you must replace the semicolon in the stored procedure name to an underscore. For example, if you have a stored procedure with the following name:
GetEmployeeName;3
Dynamic Data Masking creates the following table in the temporary database:
DDM_GetEmployeeName_3_<unique long number for call>_<result set sequence number>
When you create masking rules for the stored procedure, you enter the following text in the Mask rule action Table Name parameter:
.* DDM_GetEmployeeName_3.*

0 COMMENTS

We’d like to hear from you!