Start of change

-20473   THE INPUT ARGUMENT OF FUNCTION function-name THAT IS DEFINED WITH THE NOT-SECURED OPTION MUST NOT REFERENCE COLUMN column-name FOR WHICH A COLUMN MASK IS ENABLED AND THE COLUMN ACCESS CONTROL IS ACTIVATED FOR THE TABLE

Explanation

The input argument of a function references a column when it must not do so. When a column mask is enabled and column access control is activated for a table, the input argument of an insecure function must not reference the column.

function-name
The name of the function.
column-name
The name of the column.

System action

The statement cannot be processed.

Programmer response

Take either of the following actions, and reinvoke the function.

  • Update the function invocation so that it does not reference the column that is identified by column-name.
  • Disable or drop the column mask.

SQLSTATE

428HA

End of change