The ALTER MASK statement alters a column mask that exists at the current server.
This statement can be embedded in an application program or issued interactively. It is an executable statement that can be dynamically prepared only if DYNAMICRULES run behavior is implicitly or explicitly specified.
The privileges held by the authorization ID of the statement must include SECADM authority.
Enables the column mask. If column level access control is not currently activated on the table, the column mask will become effective when column level access control is activated on the table. If column level access control is currently activated on the table, the column mask becomes effective immediately and all packages and dynamically cached statements that reference the table are invalidated.
ENABLE is ignored if the column mask is already enabled.
Disables the column mask. If column level access control is not currently activated on the table, the column mask will remain ineffective when column level access control is activated on the table. If column level access control is currently activated on the table, the column mask becomes ineffective immediately and all packages and dynamically cached statements that reference the table are invalidated.
DISABLE is ignored if the column mask is already disabled.
ALTER MASK M1 ENABLE
ALTER MASK M1 DISABLE