Redirecting query to view masked data via federation table

A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computing device comprising a federated database system to cause the computing device to:

• receive a database query from a masking proxy for a to-be-masked portion of data in a database, the to-be-masked portion of the data including data that is not to be accessed by a database client;
• perform the database query on at least one view of the database in the computing device to generate a masked resultant data, the at least one view of the database being created from tables that are federated from the database and contain none of the data that is not to be accessed by the database client;
• determine, based on the database query, an unmasked portion of the data;
• direct the database query to the database for the unmasked portion of the data;
• receive, in response to the directing, unmasked resultant data from the database;
• combine the masked resultant data and the unmasked resultant data to form combined data;
• and
• forward the combined data to the database client.

A system comprising:

• a processor, a computer readable memory, and a computer readable storage medium;
• program instructions to receive a database query of a database from a database client;
• program instructions to determine, based on the database query, a to-be-masked portion of data, the to-be-masked portion of the data including data that is not to be accessed by the database client;
• program instructions to send the database query to at least one view of the database for the to-be-masked portion of the data, the at least one view of the database residing on a federated database system and containing none of the data that is not to be accessed by the database client;
• program instructions to receive, in response to the sending, masked resultant data from the federated database system;
• program instructions to determine, based on the database query, an unmasked portion of the data;
• program instructions to direct the database query to the database for the unmasked portion of the data;
• program instructions to receive, in response to the directing, unmasked resultant data from the database;
• program instructions to combine the masked resultant data and the unmasked resultant data to form combined data;
• and
• program instructions to forward the combined data to the database client,
• wherein the to-be-masked portion of the data is masked in the at least one view of the database, and
• the program instructions are stored on the computer readable storage medium for execution by the processor via the computer readable memory.