We've been looking into row-level security to see if it might be useful for us.

In a row-secure table, there is an automatically generated column called _sec_label, which has three attributes:  security level, category, and cohort.

Users can be given these three attributes.  When deciding whether a user can view a row, the user's attributes are matched against the _sec_label attributes.

My question is, how can I find out what attributes a user has?  There doesn't seem to be anything about how to do this in the Security Admin manual -- but I don't understand how you could manage row-level security without being able to do this.

Best regards,

drosenthal