Label Security provides fine-grained access to rows of a table.
Applicability
This topic applies only to OceanBase Database Enterprise Edition. OceanBase Database Community Edition does not support this feature.
Label Security policies consist of a set of standard components. The following table describes these components:
Labels
Data and user labels, along with authorization control for users and program units, manage access to the specified protected objects. In the current version, labels only include levels. A level indicates the sensitivity type to be assigned to a row, such as
SENSITIVEorHIGHLY SENSITIVE.Policies
A policy is a name associated with these labels, rules, authorizations, and protected tables.
The following table lists the label security management packages available in the current version of OceanBase Database and their descriptions.
| Package name | Description |
|---|---|
| SA_SYSDBA | Creates, modifies, and deletes label security policies. |
| SA_COMPONENTS | Defines the levels of a policy. |
| SA_LABEL_ADMIN | Executes standard label policy management features, such as creating labels. |
| SA_POLICY_ADMIN | Applies a policy to a schema or table. |
| SA_USER_ADMIN | Manages user authorizations and program unit privileges for levels and user privileges. |
| SA_SESSION | Changes labels during sessions within the authorization scope set by an administrator. |