Обсуждение: access rights

Поиск
Список
Период
Сортировка

access rights

От
ctnan@adinet.com.uy
Дата:
I need a data base to install with my application, but i want that it can
be accessed only by the application. Because it runs on the customer computer
and i dont want he be able to watch into my database. It is posible. I mean:
if my postgres database is on his Windows 2000 and he has the Administrator
password. He have the posibility to view database structure or data? The
only way to access my postgres database is having the postgres administrator
password?

Sorry for english and thanks for your time


Re: access rights

От
Bruno Wolff III
Дата:
On Sun, Sep 19, 2004 at 02:01:10 -0300,
  ctnan@adinet.com.uy wrote:
> I need a data base to install with my application, but i want that it can
> be accessed only by the application. Because it runs on the customer computer
> and i dont want he be able to watch into my database. It is posible. I mean:
> if my postgres database is on his Windows 2000 and he has the Administrator
> password. He have the posibility to view database structure or data? The
> only way to access my postgres database is having the postgres administrator
> password?
>
> Sorry for english and thanks for your time

You can't trust code that is running on hardware under control of an
adversary. There are some things you can do to limit the use of the
database by your adversary (i.e. customer). You might want to read the
book "Translucent Databases".