| From: | Heikki Linnakangas <hlinnakangas(at)vmware(dot)com> |
|---|---|
| To: | Simon Riggs <simon(at)2ndquadrant(dot)com>, Damian Wolgast <damian(dot)wolgast(at)si-co(dot)net> |
| Cc: | PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: Column Redaction |
| Date: | 2014-10-10 10:27:26 |
| Message-ID: | 5437B48E.6090707@vmware.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On 10/10/2014 01:21 PM, Simon Riggs wrote:
> Redaction is now a feature available in other databases. I guess its
> possible its all smoke and mirrors, but thats why we discuss stuff
> before we build it.
I googled for Oracle Data redaction, and found "General Usage guidelines":
> General Usage Guidelines
>
> * Oracle Data Redaction is not intended to protect against attacks by
> privileged database users who run ad hoc queries directly against the
> database.
>
> * Oracle Data Redaction is not intended to protect against users who
> run exhaustive SQL queries that attempt to determine the actual
> values by inference.
So it's not actually suitable for the example you gave. I don't think we
want this feature...
- Heikki
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Stephen Frost | 2014-10-10 10:35:09 | Re: Column Redaction |
| Previous Message | Simon Riggs | 2014-10-10 10:21:32 | Re: Column Redaction |