Label Security provides fine-grained access to rows of a table.
Applicability
This topic applies only to OceanBase Database Enterprise Edition. OceanBase Database Community Edition does not support this feature.
Label Security policies consist of a set of standard components. The following table describes these components:
Labels
Data and user labels, along with authorization control for users and program units, manage access to the specified protected objects. In the current version, labels only include levels. A level indicates the sensitivity type to be assigned to a row, such as
SENSITIVEorHIGHLY SENSITIVE.Policies
A policy is a name associated with these labels, rules, authorizations, and protected tables.
The following table lists the label security management packages available in the current version of OceanBase Database and their descriptions.
Package name |
Description |
|---|---|
| SA_SYSDBA | Creates, modifies, and deletes label security policies. |
| SA_COMPONENTS | Defines the levels of a policy. |
| SA_LABEL_ADMIN | Executes standard label policy management features, such as creating labels. |
| SA_POLICY_ADMIN | Applies a policy to a schema or table. |
| SA_USER_ADMIN | Manages user authorizations and program unit privileges for levels and user privileges. |
| SA_SESSION | Changes labels during sessions within the authorization scope set by an administrator. |