Re: Column Redaction - Mailing list pgsql-hackers

From Heikki Linnakangas
Subject Re: Column Redaction
Date
Msg-id 5437B48E.6090707@vmware.com
Whole thread Raw
In response to Re: Column Redaction  (Simon Riggs <simon@2ndquadrant.com>)
Responses Re: Column Redaction
Re: Column Redaction
List pgsql-hackers
On 10/10/2014 01:21 PM, Simon Riggs wrote:
> Redaction is now a feature available in other databases. I guess its
> possible its all smoke and mirrors, but thats why we discuss stuff
> before we build it.

I googled for Oracle Data redaction, and found "General Usage guidelines":

> General Usage Guidelines
>
> * Oracle Data Redaction is not intended to protect against attacks by
> privileged database users who run ad hoc queries directly against the
> database.
>
> * Oracle Data Redaction is not intended to protect against users who
> run exhaustive SQL queries that attempt to determine the actual
> values by inference.

So it's not actually suitable for the example you gave. I don't think we 
want this feature...

- Heikki




pgsql-hackers by date:

Previous
From: Simon Riggs
Date:
Subject: Re: Column Redaction
Next
From: Stephen Frost
Date:
Subject: Re: Column Redaction