Note
This view is available starting with V4.6.0 of OceanBase Database V4.6.x series.
Purpose
This view displays the definitions and attributes of all sensitive rules in the current tenant.
Columns
Column |
Type |
Nullable |
Description |
|---|---|---|---|
| RULE_NAME | varchar(256) | NO | The name of the sensitive rule. |
| PROTECTION_POLICY | varchar(16) | NO | The protection policy. Valid values: ENCRYPTION and INVALID. ENCRYPTION indicates encryption protection. INVALID indicates invalid. |
| METHOD | varchar(4096) | NO | The encryption method. Valid values are listed below. |
| ENABLED | varchar(3) | NO | Indicates whether the rule is enabled. Valid values: YES and NO. YES indicates that the rule is enabled. NO indicates that the rule is disabled. |
The value of METHOD can be one of the following:
Value (used in SQL statements) |
Encryption algorithm |
Key length |
Mode |
Description |
|---|---|---|---|---|
| aes-256 | AES-256-ECB | 256 bits | ECB | The default algorithm |
| aes-128 | AES-128-ECB | 128 bits | ECB | |
| aes-192 | AES-192-ECB | 192 bits | ECB | |
| aes-128-gcm | AES-128-GCM | 128 bits | GCM | High security level. Provides authenticated encryption (AEAD). |
| aes-192-gcm | AES-192-GCM | 192 bits | GCM | High security level. Provides authenticated encryption (AEAD). |
| aes-256-gcm | AES-256-GCM | 256 bits | GCM | High security level. Provides authenticated encryption (AEAD). |
| sm4-cbc | SM4-CBC | CBC | High security level. | |
| sm4-gcm | SM4-GCM | GCM | High security level. Provides authenticated encryption (AEAD). |
Sample query
Query the definitions and attributes of all sensitive rules in the current tenant.
obclient [oceanbase]> SELECT * FROM oceanbase.DBA_OB_SENSITIVE_RULES;
The query result is as follows:
+-----------+-------------------+---------+---------+
| RULE_NAME | PROTECTION_POLICY | METHOD | ENABLED |
+-----------+-------------------+---------+---------+
| r1 | ENCRYPTION | aes-256 | YES |
+-----------+-------------------+---------+---------+
1 row in set