Thread: access rights

access rights

From
ctnan@adinet.com.uy
Date:
I need a data base to install with my application, but i want that it can
be accessed only by the application. Because it runs on the customer computer
and i dont want he be able to watch into my database. It is posible. I mean:
if my postgres database is on his Windows 2000 and he has the Administrator
password. He have the posibility to view database structure or data? The
only way to access my postgres database is having the postgres administrator
password?

Sorry for english and thanks for your time


Re: access rights

From
Bruno Wolff III
Date:
On Sun, Sep 19, 2004 at 02:01:10 -0300,
  ctnan@adinet.com.uy wrote:
> I need a data base to install with my application, but i want that it can
> be accessed only by the application. Because it runs on the customer computer
> and i dont want he be able to watch into my database. It is posible. I mean:
> if my postgres database is on his Windows 2000 and he has the Administrator
> password. He have the posibility to view database structure or data? The
> only way to access my postgres database is having the postgres administrator
> password?
>
> Sorry for english and thanks for your time

You can't trust code that is running on hardware under control of an
adversary. There are some things you can do to limit the use of the
database by your adversary (i.e. customer). You might want to read the
book "Translucent Databases".