You can specify whether data protection rules are enforced
in Data Virtualization.
Important: You might experience delays of up to 10 minutes before data protection rules
are enforced or before changes to the data protection rules are reflected.
Before you begin
Required role: To complete this task, you must have the Data Virtualization
Manager role. For more information, see Data Virtualization roles.
Procedure
To enable or disable the enforcement of data protection rules in Data Virtualization,
complete the following steps:
- On the navigation menu, click .
The service menu opens to the Data
sources page by default.
- On the service menu, click .
The General page
appears.
- On the Governance tab, enable the Enforce data
protection rules for virtual objects option to enforce data protection rules on virtual
data.
This option does not impact data protection rules in catalogs. These rules
continue to be enforced. If the option is turned off, users can query data in Data Virtualization without enforcing data protection rules.
- To improve performance, you can
cache IBM Knowledge
Catalog data protection rules in the Data Virtualization policy enforcement point (PEP) cache.
You can configure the PEP cache
settings by using the
Service settings UI. By default, the PEP cache is
configured with a live time of 10 seconds and a size of 2000 entries. You can use the short default
live time for proofs of concept to minimize the potential delay of updates. In production
environments, increase the live time to improve performance.
- Change the settings as appropriate.
- Cache size is the maximum number of cached responses from the IBM Knowledge
Catalog policy service.
- Cache live time determines how long a cached response remains valid in the
cache, in seconds.
Set either value to 0 to disable the caching of data protection
rules.
- Save your changes.