|
1. |
Fine Grained Authorization Through Predicated Grants
Chaudhuri, S.; Dutta, T.; Sudarshan, S.;
Data Engineering, 2007. ICDE 2007. IEEE 23rd International Conference on
15-20 April 2007
Page(s):1174
-
1183
Abstract:
Authorization in SQL is currently at the level of tables or columns. Many applications need a finer level of control. We propose a model for fine-grained authorization based on adding predicates to authorization grants. Our model supports predicated authorization to specific columns, cell-level authorization with nullification, authorization for function/procedure execution, and grants with grant option. Our model also incorporates other novel features, such as query defined user groups, and authorization groups, which are designed to simplify administration of authorizations. Our model is designed to be a strict generalization of the current SQL authorization mechanism.
|
Cart
