View security as the basis for data warehouse security

9 years 19 days ago
View security as the basis for data warehouse security
Access. permissions in a data warehouse are currently managed in a separate world from the sources' policies. The consequences are inconsistencies, slow response to change, and wasted administrative work. We present a different approach, which treats the sources' exported tables and the warehouse as part of the same distributed database. Our main result is a way to control derived products by extending SQL grants rather than creating entirely new mechanisms. We provide a powerful, sound inference theory that derives permissions on warehouse tables (both materialized and virtual), making the system easier to administer and its applications more robust. We also propose a new permission construct suitable for views that filter data from mutually-suspicious parties.
Arnon Rosenthal, Edward Sciore
Added 01 Nov 2010
Updated 01 Nov 2010
Type Conference
Year 2000
Where DMDW
Authors Arnon Rosenthal, Edward Sciore
Comments (0)