Creating or Editing a Row Filter Policy Group
Row filter policy groups allow multiple policies to be assigned to one or more resources. It is an organizational tool that you can use to save time when assigning multiple row filter policies to one or more resources.
The definition of the row filter policy groups provides few constraints so that you can design the policies as you need to. Because of that flexibility, you must perform testing of your policies. TDV will attempt to detect obvious errors in policy behavior, but, TDV cannot detect conflicts between multiple policy definitions or logic errors of policies that are defined by dynamic variables.
To add or edit a row-based security policy group
2. To add a new row filter policy group, click Add Policy. Or, to edit an existing row filter policy, select the policy group and click Edit Policy.
3. Select or specify values for the following fields.
Field | Specify |
Name | Specifies the name you want to give to the row filter policy group. Spaces are not allowed. |
Folder | Specify the location within /shared for the policy when adding a new row filter policy group. If you are editing an existing row filter policy group, the Folder field is read only. |
Enabling | • Enable—Allow the use of the specific row filter policy group. • Disable—Disallow the use of the specific row filter policy group. Regardless of this setting, you can still add and edit the row filter policy group. If the policy is disabled, it is not used against the data, even if the policy is part of a group. For example, if an RBS_group contains three policies (pig, hive, and gnu) and the gnu policy is disabled, when the RBS_group is applied only the pig and hive policies are used. |
Specification | Group—Select this to add a row filter policy group. |
Description | (Optional) Type an explanation of the row filter policy group. |
The screen displays additional fields and buttons.
4. Click Add Policy.
5. Select or type the full path and name of the policy you want to add to the group.
6. Click OK.
7. Select or type the full path and name of the policy you want to add to the group.
8. Click OK.
9. Continue adding policies to the group until it is defined as you want.
10. Specify a value for the Group Requirement field.
Value | Description |
Row data must satisfy ALL policies listed above | Combines all of the policies in the group with AND operators. Use this setting to display a record if both the all conditions are met. |
Row data might satisfy ANY policy listed above | Combines all of the policies in the group with OR operators. Use this setting to display a record if any of the conditions are true. |
11. Optionally, type a description of the policy group.
12. Click OK.