Overview
The existing QueryPie DAC provides data policies such as Data Access, Data Masking, Sensitive Data, and Ledger Table Management. However, these policies must be set individually for each connection, and rules must be applied for each table and column. And it does not provide import and export functions for policies.
From 10.2.6, to improve these inconveniences, a new policy management feature is provided. Through the tag-based policy application feature, after mapping DBMS paths and tags, when policies are applied, policies can be dynamically assigned by tags. You can set access to only specific tables through tags assigned to tables.
Using the New Policy Management Feature
To use the new policy management feature, you must first enable the feature.
In General > Company management > Security, set New DAC Policy Management to Enable
in the DB Connection Security sub-item. (Default value Disable)
Enable New DAC Policy Management
Before enabling the new policy management feature, you must first review the following content.
- Before enabling this feature, you must first turn off the ledger table management feature.
- When the new policy management feature is enabled, existing policies are deactivated and will not be visible in the menu. To access the settings screen, you must directly enter the URL of the existing policy in the browser.
- Direct access URLs for old policy pages
- Data Access : https://
{QueryPie Host}
/database-settings/policies/data-access - Data Masking : https://
{QueryPie Host}
/database-settings/policies/data-masking - Sensitive Data : https://
{QueryPie Host}
/database-settings/policies/sensitive-data - Policy Exception : https://
{QueryPie Host}
//database-settings/policies/policy-exception ****
- Data Access : https://
- When the new policy management feature is enabled, existing policies are deactivated. Existing policies are not deleted, so you can check the content of existing policies by moving to the existing UI through the URL.
- Policies created by this feature are not compatible with existing policies and cannot migrate existing policies.
- You can only disable this feature after deleting all policies created with the new policy management feature.