если это JSP формы, то можно использовать Attribute Control

HTML-Based Applications Security
Oracle HTML-based applications use columns, rows and values in database tables to define what information users can access. Table columns represent attributes that can be assigned to a responsibility as Securing Attributes or Excluded Attributes. These attributes are defined in the Web Application Dictionary.

Excluded Items
Use the List of Values to select valid attributes. You can assign any number of Excluded Attributes to a responsibility.

Securing Attributes
Use the List of Values to select valid attributes. You can assign any number of securing attributes to the responsibility. - это как раз про исключение строк

тут подробнее

http://download.oracle.com/docs/cd/B25516_18/current/acrobat/115sasg.pdf

Securing отвечает за исключение строк а Ecluding за исключение колонок. работает токо для Self-Serfice форм