Using VPD -- Very Confused!

Question

Hey,
I'm trying to write a small amount of code that will generate the PL/SQL that I'll need to implement simple policies like:
Column ________ in table ________ should only be visible by ________ and ________
I've been reading the Oracle Security Guide for a few hours but am so confused by everything that needs to be done!
This is what I'm thinking so far:
* STEP 1: SET SECURE CONTEXT:
* CREATE OR REPLACE PACKAGE $pol_name AS
* PROCEDURE set_user;
* END;
* CREATE OR REPLACE PACKAGE BODY $pol_name AS
* PROCEDURE set_user IS
* user VARCHAR;
* BEGIN
*      user = SYS_CONTEXT('USERENV', 'SESSION_USER');
*      DBMS_SESSION.SET_CONTEXT('app_context', 'user', user);
* END;
* END;
* STEP 2: CREATE A UNIQUE SECURE CONTEXT:
* CREATE CONTEXT user_entry USING $pol_name ;
* STEP 3: SET THE SECURE CONTEXT BEFORE THE USER RETRIEVES DATA (TRIGGERS!):
Obviously I'm not done yet, but I'm just not sure if I'm on the right track!
Any ideas?
Thanks!

Answer 1

Hey, thanks for replying!
I'm using 10g R2 and the documentation talks about column level restriction and a nice new feature called column masking--both of which I'm trying to implement. But those are implemented when adding the policy, I'm most confused by the first few steps, setting up the procedures and what not.
Thanks again!