I am setting up VPD column masking using sec_relevant_cols_opt=>DBMS_RLS.ALL_ROWS option. My policy function should evaluate the access to the columns based on certain roles granted to him. The policy function always appends the where clause predicate with true or false depending on the user's access, Is is advisable to set the STATIC_POLICY => TRUE , or there may be risks involved in using this with column masking.
I did not find any recommendations for column masking related to performance on oracle docs.
since VPD with column masking as you intend to configure is implemented as a significant rewrite of the SQL (not just by adding the predicate but using CASE in the select list)
there may be performance consequences, please check note 602280.1 Column Level VPD on Indexed Columns Can Lead to Slow Execution Plan,
Harm ten Napel
Edited by: hnapel on Jun 7, 2013 2:44 AM