Oracle Deep Data Security in Oracle AI Database 26ai: End Users and Data Roles
Oracle AI Database 26ai answers this with a new feature called Oracle Deep Data Security , or “Deep Sec.” Deep Sec is a database-enforced authorization framework: instead of hoping application code, middleware, or an AI agent behaves correctly, you declare exactly which rows, columns, and even individual cells a given user, role, or application is allowed to touch — and the database enforces that rule on every single query, no matter who or what sent it. It works alongside familiar tools such as Oracle Label Security and Data Masking , but it introduces a cleaner, SQL-native way to define fine-grained access that scales far better than row-level security written in PL/SQL. The easiest way to understand Deep Sec is through three new building blocks that this article will use hands-on: ● Local End users — lightweight identities for application users that do not own schemas or objects, unlike traditional database users. ● Data roles — roles created specifically to carry fine-g...