Verify dynamic masking and query audit
Check identity, results, and audit together using approved samples and accounts.
Prepare cases
Record database, gateway, tables/columns, identity, and expectations.
| Case | Expectation |
|---|---|
| Allowed access | Approved scope readable |
| Restricted access | Excluded objects unavailable through normal allow path |
| Row filtering | Returned records satisfy conditions |
| Masking | Selected fields follow rules |
| Other fields | No incorrect rule applied |
| Different users | Their own identities/policies respected |
Do not substitute administrators for all roles.
Execute and compare
- Connect using JDBC configuration.
- Confirm mode/username and run a scoped query.
- Compare rows, fields, and presentation.
- Repeat applicable cases for each identity.
- Find the same SQL in gateway audit.
- Retain passed/failed cases, errors, and results.
Presentation changes do not rewrite source data.
Distinguish logs
Gateway audit records SQL; security operation logs record administration. For missing audit, check direct connections, selected gateway, and time filters.
Check compatibility
Confirmed types include Oracle, Hive, MySQL, PostgreSQL, DB2, and Vertica. Validate the database/client/driver/gateway combination. Historical tests do not establish arbitrary SQL, concurrency, or fixed performance guarantees.