DROP MASKING POLICY

Introduced or updated: v1.2.845

ENTERPRISE EDITION FEATURE

MASKING POLICY is an Enterprise Edition feature. Contact Databend Support for a license.

Deletes an existing masking policy from Databend. When you drop a masking policy, it is removed from Databend, and its associated masking rules are no longer in effect. Please note that, before dropping a masking policy, ensure that this policy is not associated with any columns.

Syntax

DROP MASKING POLICY [ IF EXISTS ] <policy_name>

Access Control Requirements

Privilege	Description
APPLY MASKING POLICY	Required to drop a masking policy unless you own that policy.

You must have the global APPLY MASKING POLICY privilege or APPLY/OWNERSHIP on the target policy. Databend automatically revokes OWNERSHIP from the creator role after the policy is dropped.

Examples

CREATE MASKING POLICY email_mask
AS
  (val string)
  RETURNS string ->
  CASE
  WHEN current_role() IN ('MANAGERS') THEN
    val
  ELSE
    '*********'
  END
  COMMENT = 'hide_email';

DROP MASKING POLICY email_mask;