ALTER MASK statement

The ALTER MASK statement alters a column mask that exists at the current server.

Invocation

This statement can be embedded in an application program or issued interactively. It is an executable statement that can be dynamically prepared only if DYNAMICRULES run behavior is implicitly or explicitly specified.

Authorization

The privileges held by the authorization ID of the statement must include SECADM authority.

Syntax

Read syntax diagramSkip visual syntax diagramALTER MASKmask-nameENABLEDISABLE

Description

mask-name
Identifies the column mask to be altered. The name must identify a mask that exists at the current server (SQLSTATE 42704).
ENABLE

Enables the column mask. If column level access control is not currently activated on the table, the column mask will become effective when column level access control is activated on the table. If column level access control is currently activated on the table, the column mask becomes effective immediately and all packages and dynamically cached statements that reference the table are invalidated.

ENABLE is ignored if the column mask is already enabled.

DISABLE

Disables the column mask. If column level access control is not currently activated on the table, the column mask will remain ineffective when column level access control is activated on the table. If column level access control is currently activated on the table, the column mask becomes ineffective immediately and all packages and dynamically cached statements that reference the table are invalidated.

DISABLE is ignored if the column mask is already disabled.

Examples

  • Example 1: Enable column mask M1.
    ALTER MASK M1 ENABLE
  • Example 2: Disable column mask M1.
    ALTER MASK M1 DISABLE