How to handle multiple schemas masking of same database

  • 0
  • 1
  • Problem
  • Updated 1 year ago
  • Solved

We have operational data store where database is structured with multiple schemas. Means, there is no master or global schemas where all tables can be browsed. To implement masking, multiple connections to be made with different schemas and multiple masking jobs to be built for same database.

But, product doesn't allow to map multiple masking jobs while creating VDB from dSource. Is anyone come across this situation and solution to handle?

Photo of santosh kumar

santosh kumar

  • 430 Points 250 badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Hims

Hims, Employee

  • 2,306 Points 2k badge 2x thumb
Hi Santosh,
Delphix Masking works on schema based architecture essentially for a security required minimum needed access standpoint.
Usual ways to handle this:
1. Add  a synonym or object owner who is having access to all required schemas.
2. If we have multiple jobs, Delphix users usually call a script via a hook which will call multiple masking jobs.

--Hims
Photo of Gianpiero Piccolo

Gianpiero Piccolo

  • 1,526 Points 1k badge 2x thumb
Hi Santosh, you need to configure the "Configure Clone" hook script of your new masked vdb you're provisioning. In this script you should call all masking jobs minus one. The last job can be selected from the combo box of the provisioning wizard form.
If you are interesteed I can send you a sample script to invoke via RESTful job start command.
Regards.
Gianpiero
Photo of santosh kumar

santosh kumar

  • 430 Points 250 badge 2x thumb
Wow !! some working solutions. That would be great if you have samples to share and attach here.
Photo of Gianpiero Piccolo

Gianpiero Piccolo

  • 1,526 Points 1k badge 2x thumb
Hi Santosh,

this is the REST API doc: https://docs.delphix.com/docs/delphix-masking/delphix-masking-quick-start-guide/masking-api-calls-to...


You could use curl or any other programming language to interact with ordinary rest API


Best Regards.
Gianpiero
Photo of santosh kumar

santosh kumar

  • 430 Points 250 badge 2x thumb

Hi Gianpiero,

So far, I was busy with profiling data and mapping masking rules. Reached a stage where I need to start putting some code together.

It would be great help if you have any sample script that you have coded.

Thanks,

Santosh

Photo of Gianpiero Piccolo

Gianpiero Piccolo

  • 1,526 Points 1k badge 2x thumb
Ok. Tomorrow I'll be back to you with some scripts.
Regards
Photo of Gianpiero Piccolo

Gianpiero Piccolo

  • 1,526 Points 1k badge 2x thumb
Sorry for my late reply. Send me an email gianpieropiccolo at gmail.com and I'll send you back my shell script.
Regards.
Gianpiero
Photo of Gianpiero Piccolo

Gianpiero Piccolo

  • 1,526 Points 1k badge 2x thumb
If you do not need automatic refresh or provisioning of your masked vdb, you could mask manually a first vdb (let's call it vdb1) with your masking jobs and for the last job you could provision a masked vdb as a child of vdb1.
Photo of santosh kumar

santosh kumar

  • 430 Points 250 badge 2x thumb

True, this approach can work for manual. the whole idea is to bring delphix as self service for development and testing communities. Earlier, I thought 1-2 databases have multiple schemas, but I was wrong and there are many to handle. So, automation is the need for us.

Photo of Gianpiero Piccolo

Gianpiero Piccolo

  • 1,526 Points 1k badge 2x thumb
Ok, I'm waiting for your email to send back to you the shell script