Relational Database External Table for Non-Relational Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Non-relational databases like Redis lack role management functionality, leading to unrestricted access and significant security risks as all users can perform operations such as data insertion and deletion with the same account credentials.
Innovation Solution
Implementing a method and system for managing database permissions by creating a relational database with pre-configured external tables that map to non-relational databases, allowing permission management through a login account's role-based permissions, thereby restricting operations based on predefined management permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If non-relational databases use a single account for all users, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent introduces an external table as an intermediary layer between the relational database management system and the non-relational database. This external table allows the RDBMS permission management mechanisms to control access to the non-relational database while maintaining the simplicity of a single account system. The external table acts as a mediator that translates permission checks from the RDBMS layer to operations on the non-relational database, thus improving security without compromising ease of operation.
2Reliability
If non-relational databases add role management functionality, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent leverages the universal permission management capabilities of the relational database management system to manage access to the non-relational database. Instead of implementing a separate permission management system for the non-relational database, the solution makes the RDBMS permission mechanisms multi-functional by enabling them to control both relational and non-relational database operations through the external table. This approach improves security while avoiding the complexity of duplicating permission management functionality.
Data Source
AI summary
Disclosed is a method for managing database permissions, the method including: obtaining a login account that successfully logs in to a first database, where the first database is a relational database built in with permission management and is pre-configured with an external table that has a mapping relationship with a second database; ascertaining management permissions of the login account based on pre-configured management permission information; determining whether a management operation on the external table by the login account exceeds the management permissions of the login account; and if the management operation by the login account does not exceed its management permissions, permitting the management operation, and synchronizing the management operation to the second database based on the mapping relationship between the external table and the second database. Further disclosed are a system and a device for managing database permissions, as well as a computer-readable storage medium.