Adv Replication AND Label Security

Question

Has anybody implemented Adv Replication AND Label Security?
I am looking for any advice and warnings.

Answer 1

Your replication administrator accounts (REPADMIN,etc) will need to have the OLS READ (or FULL) privilege for the policy on the replicated tables so that the predicate is not added. These users will see and replicate everything, there is no way (in Adv. Rep) to replicate data based on the OLS label (say, to only replicate things that are S instead of TS).
As long as your replication admins have full privilege (or potentially the system privilege EXEMPT ACCESS POLICY, but this bypasses all policies/vpds and shouldn't be used unless you need to and understand the impacts), everything will work out just fine.
Likely you are aware but if you intend to have the data protected on the target(s), it will need a copy of the policy and the policy applied to the tables as well. You can use database managed OLS and manage the policy in both (or all) places, or evaluate central management of the policy in OID. As much as the OID method has its advanages, I would stick to managing the policy in the database (and automating distributing the changes to different environments) unless you have another good reason to use OID.