Oracle Data Redaction: Mask at Read Time, Prove It Isn't Access Control

Oracle Data Redaction (DBMS_REDACT) without the myths: full, partial, regexp and random masking, who gets redacted via the policy expression and EXEMPT REDACTION POLICY, and a lab proving it is a read-time display control — not encryption at rest and not access control.