Data masking certain data keys using N1QL scalar functions and SDK APIs

Provide a scalar function in N1QL which exposes the first and last letters and adds a custom padding string in the middle

If the original value is too short to complete the entire mask, part of the prefix or suffix will not be exposed.

Function signature should be mask(prefix,[padding],suffix)

Use-cases
A call center support person may identify callers by several digits of their social security number or credit card number, but those data items should not be fully exposed to the support person. A masking rule can be defined that masks all but the last four digits of any social security number or credit card number in the result set of any query.

For another example, by using the appropriate data mask to protect personally identifiable information (PII) data, a developer can query production environments for troubleshooting purposes without violating compliance regulations.