The Block Statement action does not allow the SQL request statement to reach the database.
If the Rule Engine applies a Block Statement action, the Dynamic Data Masking service sends an error message to the client or application.
Applications and tools can present the database error message and the Dynamic Data Masking error, which you can use to determine the reason that access is blocked.
If you create a rule that uses the Any matcher and the Block rule action, the application will fail to start and will not return the Block message you specify in the Rule Editor. You can log the internal application SQL requests before you block access to the database with a rule that uses the Nothing rule action followed by a rule that uses the Block rule action. The application will initiate and send the Dynamic Data Masking message to the user before it blocks the request.
The following table describes the Block Statement action parameters:
Parameter
Description
Error message
Defines the error message sent to the client or application when the Rule Engine applies the block statement action.