https://data-henrik.de/tags/fgac/ Recent content in Fgac on Data Henrik - Life in IT Hugo -- gohugo.io en-us Fri, 09 Oct 2026 15:48:00 +0200 https://data-henrik.de/2026/10/db2-column-masking-security/ Fri, 09 Oct 2026 15:48:00 +0200 https://data-henrik.de/2026/10/db2-column-masking-security/ <img src="https://data-henrik.de/images/faceMaskData.avif" alt="Featured image of post Testing the enhanced Db2 Column Masking" /><p>During Covid-19, I blogged about <a class="link" href="https://data-henrik.de/2020/11/covid-19-data-masking-db2/" target="_blank" rel="noopener" >data masking</a>. I showed how masks are used to filter out stuff that may harm you or others, how they prevent &ldquo;leakage&rdquo; of harmful particles, including sensitive data. <a class="link" href="https://www.ibm.com/docs/en/db2/12.1.x?topic=1212-security-enhancements" target="_blank" rel="noopener" >Db2 12.1.2 includes many security enhancements</a>, including improvements to <a class="link" href="https://www.ibm.com/docs/en/db2/12.1.x?topic=rules-masking" target="_blank" rel="noopener" >data masking</a>.</p> <h2 id="row-and-column-access-control">Row and column access control </h2><p>Masking is part of <a class="link" href="https://www.ibm.com/docs/en/db2/12.1.x?topic=security-row-column-access-control-rcac" target="_blank" rel="noopener" >Row and column access control (RCAC)</a>. It allows to filter on which rows are visible to specific users, and how column values are presented. Often, for that reason, RCAC is referred to as fine-grained access control (FGAC). It is one layer in the overall strategy for database security, has its strengths and weaknesses (see later).</p>