Difference between revisions of "Securing Your Data"
Yvonne.milne (Talk | contribs) m (1 revision) |
Yvonne.milne (Talk | contribs) (→DES3 Encrypting Your Data) |
||
(9 intermediate revisions by 3 users not shown) | |||
Line 1: | Line 1: | ||
==Securing Your Data== | ==Securing Your Data== | ||
===Controlling Access to Data=== | ===Controlling Access to Data=== | ||
− | The most basic level of database security is provided by the operating system. | + | The most basic level of database security is provided by the operating system. Lianja tables and indexes are individual files with their own respective operating system file permissions. Read permission is required to open a table and write permission to update a table. If a user does not have read permission they are denied access. Without write permission, a table will be opened read-only. |
− | Here the owner, ''root'', and members of the '' | + | Here the owner, ''root'', and members of the ''lianja'' group have write permission, so can update the example table unless additional protection applies. Other users can open the example table read-only. |
<pre> | <pre> | ||
# ls -l example* | # ls -l example* | ||
− | -rwxrwxr-x 1 root | + | -rwxrwxr-x 1 root lianja 147 Nov 29 14:27 example.dbd |
− | -rwxrwxr-x 1 root | + | -rwxrwxr-x 1 root lianja 41580 Nov 29 14:27 example.dbf |
− | -rwxrwxr-x 1 root | + | -rwxrwxr-x 1 root lianja 13312 Nov 29 14:28 example.dbt |
− | -rwxrwxr-x 1 root | + | -rwxrwxr-x 1 root lianja 19456 Nov 29 14:28 example.dbx |
</pre> | </pre> | ||
Line 16: | Line 16: | ||
should have the same permissions as the table itself: | should have the same permissions as the table itself: | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !File Extension||File Type | + | !width="30%"|File Extension||File Type |
|- | |- | ||
|.dbd||Dictionary | |.dbd||Dictionary | ||
Line 34: | Line 34: | ||
Security and Protection rules can be defined using the [[GRANT|grant]] and [[REVOKE|revoke]] statements and are based on Access Control Strings. An Access Control String (ACS) is a range of valid user identification codes, and is used to restrict table operations to certain individuals or groups. A user identification code is the combination of group and user numbers. When constructing an Access Control String of linked user identification codes, wild card characters may be used. | Security and Protection rules can be defined using the [[GRANT|grant]] and [[REVOKE|revoke]] statements and are based on Access Control Strings. An Access Control String (ACS) is a range of valid user identification codes, and is used to restrict table operations to certain individuals or groups. A user identification code is the combination of group and user numbers. When constructing an Access Control String of linked user identification codes, wild card characters may be used. | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !Example ACS||Description | + | !width="30%"|Example ACS||Description |
|- | |- | ||
|[1,2]||In group 1, user 2 | |[1,2]||In group 1, user 2 | ||
Line 52: | Line 52: | ||
Access Control Strings may be associated with the following operations: | Access Control Strings may be associated with the following operations: | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !Operation||Description | + | !width="30%"|Operation||Description |
|- | |- | ||
− | |select||Users specified in the ACS may name any column in a select statement. All other users have update access. | + | |valign="top"|select||Users specified in the ACS may name any column in a select statement. All other users have update access. |
|- | |- | ||
− | |update||Users specified in the ACS can update rows in the table. All other users are restricted to read-only access. | + | |valign="top"|update||Users specified in the ACS can update rows in the table. All other users are restricted to read-only access. |
|- | |- | ||
− | |insert||Users specified in the ACS can insert rows into the table. No other users can insert. | + | |valign="top"|insert||Users specified in the ACS can insert rows into the table. No other users can insert. |
|- | |- | ||
− | |delete||Users specified in the ACS can delete rows from the table. No other users can delete. | + | |valign="top"|delete||Users specified in the ACS can delete rows from the table. No other users can delete. |
|- | |- | ||
− | |alter||Users specified in the ACS can use the alter table statement on this table. | + | |valign="top"|alter||Users specified in the ACS can use the alter table statement on this table. |
|- | |- | ||
− | |copy||Users specified in the ACS can copy records from the table. No other users can copy. | + | |valign="top"|copy||Users specified in the ACS can copy records from the table. No other users can copy. |
|- | |- | ||
− | |readonly||Users specified in the ACS may read any column in a select statement. All other users have update access. | + | |valign="top"|readonly||Users specified in the ACS may read any column in a select statement. All other users have update access. |
|- | |- | ||
|} | |} | ||
Line 84: | Line 84: | ||
Like Security rules, Protection rules can be defined using the [[GRANT|grant]] and [[REVOKE|revoke]] statements and are based on Access Control Strings. | Like Security rules, Protection rules can be defined using the [[GRANT|grant]] and [[REVOKE|revoke]] statements and are based on Access Control Strings. | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !Operation||Description | + | !width="30%"|Operation||Description |
|- | |- | ||
− | |select||Users specified in the ACS may name the column in a select statement. All other users have update access. | + | |valign="top"|select||Users specified in the ACS may name the column in a select statement. All other users have update access. |
|- | |- | ||
− | |update||Users specified in the ACS may name the column in an update statement. All other users are restricted to read-only access. | + | |valign="top"|update||Users specified in the ACS may name the column in an update statement. All other users are restricted to read-only access. |
|- | |- | ||
− | |readonly||Users specified in the ACS may read the column in a select statement. All other users have update access. | + | |valign="top"|readonly||Users specified in the ACS may read the column in a select statement. All other users have update access. |
|- | |- | ||
|} | |} | ||
Line 107: | Line 107: | ||
The [[SQL Constraints|column constraints]] are as follows: | The [[SQL Constraints|column constraints]] are as follows: | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !Constraint||Description | + | !width="30%"|Constraint||Description |
|- | |- | ||
− | |auto_increment | autoinc||Used to auto increment the value of a column. | + | |valign="top"|auto_increment | autoinc||valign=top|Used to auto increment the value of a column. |
|- | |- | ||
− | |calculated||Used to calculate the value of a column. | + | |valign="top"|calculated||Used to calculate the value of a column. |
|- | |- | ||
− | |check | set check||Used to validate a change to the value of a column. | + | |valign="top"|check | set check||Used to validate a change to the value of a column. |
|- | |- | ||
− | |default||Used to set a default value for the specified column. | + | |valign="top"|default||Used to set a default value for the specified column. |
|- | |- | ||
− | |description||Used set the column description for the specified column. | + | |valign="top"|description||Used set the column description for the specified column. |
|- | |- | ||
− | |error||Used to define an error message to be displayed when a validation check fails. | + | |valign="top"|error||Used to define an error message to be displayed when a validation check fails. |
|- | |- | ||
− | |not null | null||Used to disallow/allow null values. | + | |valign="top"|not null | null||valign=top|Used to disallow/allow null values. |
|- | |- | ||
− | |range||Used to specify minimum and maximum values for a date or numerical column. | + | |valign="top"|range||Used to specify minimum and maximum values for a date or numerical column. |
|- | |- | ||
− | |recalculate||Used to force recalculation of calculated columns when a column’s value changes. | + | |valign="top"|recalculate||Used to force recalculation of calculated columns when a column’s value changes. |
|- | |- | ||
− | |references||Used to create a relationship to an index key of another table. | + | |valign="top"|references||Used to create a relationship to an index key of another table. |
|- | |- | ||
|} | |} | ||
Line 149: | Line 149: | ||
The following table constraints may be applied in the [[CREATE TABLE|create table]] and [[ALTER TABLE|alter table]] statements: | The following table constraints may be applied in the [[CREATE TABLE|create table]] and [[ALTER TABLE|alter table]] statements: | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !Constraint||Description | + | !width="30%"|Constraint||Description |
|- | |- | ||
− | |onupdate||The specified procedure is called prior to an [[SQL UPDATE|update]] operation on the table. If the procedure returns false (.F.), then the update is canceled. | + | |valign="top"|onupdate||The specified procedure is called prior to an [[SQL UPDATE|update]] operation on the table. If the procedure returns false (.F.), then the update is canceled. |
|- | |- | ||
− | |ondelete||The specified procedure is called prior to a [[SQL DELETE|delete]] operation on the table. If the procedure returns false (.F.), then the delete is canceled. | + | |valign="top"|ondelete||The specified procedure is called prior to a [[SQL DELETE|delete]] operation on the table. If the procedure returns false (.F.), then the delete is canceled. |
|- | |- | ||
− | |oninsert||The specified procedure is called prior to an [[SQL INSERT|insert]] operation on the table. If the procedure returns false (.F.), then the insert is canceled. | + | |valign="top"|oninsert||The specified procedure is called prior to an [[SQL INSERT|insert]] operation on the table. If the procedure returns false (.F.), then the insert is canceled. |
|- | |- | ||
− | |onopen||The specified procedure is called after an open operation on the table. | + | |valign="top"|onopen||The specified procedure is called after an open operation on the table. |
|- | |- | ||
− | |onclose||The specified procedure is called prior to a close operation on the table. | + | |valign="top"|onclose||The specified procedure is called prior to a close operation on the table. |
|- | |- | ||
− | |||
|} | |} | ||
Line 173: | Line 172: | ||
alter table customers modify onopen "p_open" | alter table customers modify onopen "p_open" | ||
alter table customers modify onclose "p_close" | alter table customers modify onclose "p_close" | ||
− | |||
</code> | </code> | ||
The ''check'' constraint and its associated ''error'' constraint can also be defined at table level. | The ''check'' constraint and its associated ''error'' constraint can also be defined at table level. | ||
− | {| class="wikitable" | + | {| class="wikitable" width="100%" |
− | !Constraint||Description | + | !width="30%"|Constraint||Description |
|- | |- | ||
− | |check | set check||Logical expression validated when an operation to insert, update or delete records in the table is called. | + | |valign="top"|check | set check||Logical expression validated when an operation to insert, update or delete records in the table is called. |
|- | |- | ||
− | |error||Used to define an error message to be displayed when a validation check fails. | + | |valign="top"|error||Used to define an error message to be displayed when a validation check fails. |
|} | |} | ||
Line 194: | Line 192: | ||
===DES3 Encrypting Your Data=== | ===DES3 Encrypting Your Data=== | ||
− | + | Lianja gives you the ability to encrypt the data held in Lianja tables. Once a table has been encrypted, the data cannot be accessed unless the correct three-part encryption key is specified, providing additional security for sensitive data. | |
* [[ENCRYPT|encrypt]] | * [[ENCRYPT|encrypt]] | ||
Line 247: | Line 245: | ||
<pre> | <pre> | ||
− | + | decrypt <tablename as character> | <skeleton as character> key <key as character> | |
</pre> | </pre> | ||
The ''decrypt'' command is used to decrypt the data in the specified table or tables matching a skeleton. The specified key must contain the three part comma-separated key used to previously encrypt the table and may optionally be enclosed in angled brackets. The skeleton syntax can only be used if all tables matching the skeleton have the same key. | The ''decrypt'' command is used to decrypt the data in the specified table or tables matching a skeleton. The specified key must contain the three part comma-separated key used to previously encrypt the table and may optionally be enclosed in angled brackets. The skeleton syntax can only be used if all tables matching the skeleton have the same key. | ||
− | The ''decrypt'' command decrypts the data and removes the table's '.dkf | + | The ''decrypt'' command decrypts the data and removes the table's '.dkf' file. After decryption, the key need no longer be specified to gain access to the table. |
<code lang="recital"> | <code lang="recital"> | ||
Line 320: | Line 318: | ||
use encorders encryption "newkey_1,newkey_2,newkey_3" | use encorders encryption "newkey_1,newkey_2,newkey_3" | ||
</code> | </code> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
* [[USE|use]] - open a table | * [[USE|use]] - open a table | ||
Line 372: | Line 343: | ||
insert into customers; | insert into customers; | ||
(customerid, companyname); | (customerid, companyname); | ||
− | values (" | + | values ("LIANJ","Lianja Inc") |
// Or by appending the key to the filename | // Or by appending the key to the filename | ||
open database southwind | open database southwind | ||
insert into customers<key_1,key_2,key_3>; | insert into customers<key_1,key_2,key_3>; | ||
(customerid, companyname); | (customerid, companyname); | ||
− | values (" | + | values ("LIANJ","Lianja Inc") |
</code> | </code> | ||
Line 401: | Line 372: | ||
set encryption to "key_1,key_2,key_3" | set encryption to "key_1,key_2,key_3" | ||
update customers; | update customers; | ||
− | set companyname=" | + | set companyname="Lianja Inc."; |
− | where customerid=" | + | where customerid="LIANJ" |
// Or by appending the key to the filename | // Or by appending the key to the filename | ||
open database southwind | open database southwind | ||
update customers<key_1,key_2,key_3>; | update customers<key_1,key_2,key_3>; | ||
− | set companyname=" | + | set companyname="Lianja Inc."; |
− | where customerid=" | + | where customerid="LIANJ" |
</code> | </code> | ||
+ | |||
+ | [[Category:Lianja Scripting Essentials]] |
Latest revision as of 12:09, 27 October 2017
Contents
Securing Your Data
Controlling Access to Data
The most basic level of database security is provided by the operating system. Lianja tables and indexes are individual files with their own respective operating system file permissions. Read permission is required to open a table and write permission to update a table. If a user does not have read permission they are denied access. Without write permission, a table will be opened read-only.
Here the owner, root, and members of the lianja group have write permission, so can update the example table unless additional protection applies. Other users can open the example table read-only.
# ls -l example* -rwxrwxr-x 1 root lianja 147 Nov 29 14:27 example.dbd -rwxrwxr-x 1 root lianja 41580 Nov 29 14:27 example.dbf -rwxrwxr-x 1 root lianja 13312 Nov 29 14:28 example.dbt -rwxrwxr-x 1 root lianja 19456 Nov 29 14:28 example.dbx
Note: As in the example above, a table's associated files should have the same permissions as the table itself:
File Extension | File Type |
---|---|
.dbd | Dictionary |
.dbf | Table |
.dbt | Memo |
.dbx | Index |
Security
Operating System permissions can be further refined, while still using the Operating System user and group IDs, in the Security and Protection sections of the Dictionary. The Security section handles table based operations and the Protection section focuses on individual fields.
Security and Protection rules can be defined using the grant and revoke statements and are based on Access Control Strings. An Access Control String (ACS) is a range of valid user identification codes, and is used to restrict table operations to certain individuals or groups. A user identification code is the combination of group and user numbers. When constructing an Access Control String of linked user identification codes, wild card characters may be used.
Example ACS | Description |
---|---|
[1,2] | In group 1, user 2 |
[100,*] | In group 100, all users |
[2-7,*] | In groups 2-7, all users |
[*,100-200] | In all groups, users 100-200 |
[1,*]&[2-7,1-7] | In group 1, all users, in groups 2-7, users 1-7 |
The maximum ACS length is 254 characters.
Access Control Strings may be associated with the following operations:
Operation | Description |
---|---|
select | Users specified in the ACS may name any column in a select statement. All other users have update access. |
update | Users specified in the ACS can update rows in the table. All other users are restricted to read-only access. |
insert | Users specified in the ACS can insert rows into the table. No other users can insert. |
delete | Users specified in the ACS can delete rows from the table. No other users can delete. |
alter | Users specified in the ACS can use the alter table statement on this table. |
copy | Users specified in the ACS can copy records from the table. No other users can copy. |
readonly | Users specified in the ACS may read any column in a select statement. All other users have update access. |
// Grant insert privilege for the customer table open database southwind grant insert on customers to "[20,100]" // Grant all privileges to all users open database southwind grant all on shippers to public
Protection
Like Security rules, Protection rules can be defined using the grant and revoke statements and are based on Access Control Strings.
Operation | Description |
---|---|
select | Users specified in the ACS may name the column in a select statement. All other users have update access. |
update | Users specified in the ACS may name the column in an update statement. All other users are restricted to read-only access. |
readonly | Users specified in the ACS may read the column in a select statement. All other users have update access. |
// Grant update privilege for columns lastname and firstname from the customer table open database southwind grant update (lastname, firstname) on customers TO "[20,100]"
Protecting Data with Constraints
Column Constraints
The Dictionary column constraints either prevent the entry of incorrect data, e.g. must_enter and validation or aid the entry of correct data, e.g. default, picture and choicelist.
The column constraints are as follows:
Constraint | Description |
---|---|
auto_increment | autoinc | Used to auto increment the value of a column. |
calculated | Used to calculate the value of a column. |
check | set check | Used to validate a change to the value of a column. |
default | Used to set a default value for the specified column. |
description | Used set the column description for the specified column. |
error | Used to define an error message to be displayed when a validation check fails. |
not null | null | Used to disallow/allow null values. |
range | Used to specify minimum and maximum values for a date or numerical column. |
recalculate | Used to force recalculation of calculated columns when a columns value changes. |
references | Used to create a relationship to an index key of another table. |
These can be specified in create table or alter table statements:
Example
open database southwind alter table customers; add column timeref char(8); check validtime(timeref); error "Not a valid time string"
Table Constraints
Table Constraints allow event-driven procedures to be called before an I/O operation. These can be used to introduce another layer of checks before a particular operation is permitted to take place or to simply set up logging of that operation.
The following table constraints may be applied in the create table and alter table statements:
Constraint | Description |
---|---|
onupdate | The specified procedure is called prior to an update operation on the table. If the procedure returns false (.F.), then the update is canceled. |
ondelete | The specified procedure is called prior to a delete operation on the table. If the procedure returns false (.F.), then the delete is canceled. |
oninsert | The specified procedure is called prior to an insert operation on the table. If the procedure returns false (.F.), then the insert is canceled. |
onopen | The specified procedure is called after an open operation on the table. |
onclose | The specified procedure is called prior to a close operation on the table. |
Examples
open database southwind alter table customers modify onupdate "p_update" alter table customers modify ondelete "p_delete" alter table customers modify oninsert "p_insert" alter table customers modify onopen "p_open" alter table customers modify onclose "p_close"
The check constraint and its associated error constraint can also be defined at table level.
Constraint | Description |
---|---|
check | set check | Logical expression validated when an operation to insert, update or delete records in the table is called. |
error | Used to define an error message to be displayed when a validation check fails. |
Examples
open database southwind alter table customers add check callauth(); error "Not authorized"
DES3 Encrypting Your Data
Lianja gives you the ability to encrypt the data held in Lianja tables. Once a table has been encrypted, the data cannot be accessed unless the correct three-part encryption key is specified, providing additional security for sensitive data.
encrypt <tablename as character> | <skeleton as character> key <key as character>
The encrypt command is used to encrypt the data in the specified table or tables matching a skeleton. If the skeleton syntax is used, then all matching tables will be given the same encryption key. The encryption key is a three part comma-separated key and may optionally be enclosed in angled brackets. Each part of the key can be a maximum of 8 characters. The key is DES3 encrypted and stored in a .dkf file with the same basename as the table. After encryption, the three parts of the key must be specified correctly before the table can be accessed.
// Encrypt individual tables encrypt customers key "key_1,key_2,key_3" encrypt employees key "<key_1,key_2,key_3>" // Encrypt all .dbf files in the directory encrypt *.dbf key "key_1,key_2,key_3"
set encryption to [<key as character>] set encryption on | off
If a database table is encrypted, the correct three-part encryption key must be specified before the table's data or structure can be accessed. The set encryption to set command can be used to specify a default encryption key to be used whenever an encrypted table is accessed without the key being specified. The encryption key is a three part comma-separated key.
If the command to access the table includes the key, either by appending it to the table filename specification or using an explicit clause, this will take precedence over the key defined by set encryption to. Issuing set encryption to without a key causes any previous setting to be cleared. The key must then be specified for each individual encrypted table.
The default key defined by set encryption to is only active when set encryption is on. Set encryption off can be used to temporarily disable the default key. The set encryption on | off setting does not change the default key itself. Set encryption is on by default.
// Encrypt individual tables encrypt customers key "key_1,key_2,key_3" encrypt shippers key "key_2,key_3,key_4" // Specify a default encryption key set encryption to "key_1,key_2,key_3" // Open customers table using the default encryption key use customers // Specify shippers table's encryption key use shippers<key_2,key_3,key_4> // Disable the default encryption key set encryption to // Specify the individual encryption keys use customers encryption "key_1,key_2,key_3" use shippers<key_2,key_3,key_4>
decrypt <tablename as character> | <skeleton as character> key <key as character>
The decrypt command is used to decrypt the data in the specified table or tables matching a skeleton. The specified key must contain the three part comma-separated key used to previously encrypt the table and may optionally be enclosed in angled brackets. The skeleton syntax can only be used if all tables matching the skeleton have the same key.
The decrypt command decrypts the data and removes the table's '.dkf' file. After decryption, the key need no longer be specified to gain access to the table.
// Decrypt individual tables decrypt customers key "key_1,key_2,key_3" decrypt employees key "<key_1,key_2,key_3>" // Decrypt all .dbf files in the directory decrypt *.dbf key "key_1,key_2,key_3"
All of the following commands are affected when a table is encrypted:
- append from - append records to the active table from another table
// The key must be specified for an encrypted source table use mycustomers append from customers encryption "key_1,key_2,key_3"; for country = "UK"
- copy file - copy a file
// The key file must also be copied for an encrypted source table // as the target table will be encrypted encrypt customers key "key_1,key_2,key_3" copy file customers.dbf to newcustomers.dbf copy file customers.dkf to newcustomers.dkf use newcustomers encryption "key_1,key_2,key_3"
- copy structure - copy a table's structure to a new table
// The key file is automatically copied for an encrypted source table // and the target table encrypted encrypt customers key "key_1,key_2,key_3" use customers encryption "key_1,key_2,key_3" copy structure to blankcust use blankcust encryption "key_1,key_2,key_3"
- copy - copy a table
// By default, the key file is automatically copied for an encrypted // source table and the target table encrypted with the same key encrypt customers key "key_1,key_2,key_3" use customers encryption "key_1,key_2,key_3" copy to newcustomers use newcustomers encryption "key_1,key_2,key_3" // You can also create a copy with a different key encrypt customers key "key_1,key_2,key_3" use customers encryption "key_1,key_2,key_3" copy to newcustomers encrypt "newkey_1,newkey_2,newkey_3" use newcustomers encryption "newkey_1,newkey_2,newkey_3" // Or create a decrypted copy encrypt customers key "key_1,key_2,key_3"; use customers encryption "key_1,key_2,key_3" copy to newcustomers decrypt use newcustomers // You can also create an encrypted copy of a non-encrypted source table use orders copy to encorders encrypt "newkey_1,newkey_2,newkey_3" use encorders encryption "newkey_1,newkey_2,newkey_3"
- use - open a table
// The three part key must be specified to open an // encrypted table. All of the following are valid. // 1. Specifying a default encryption key before opening the table set encryption to "key_1,key_2,key_3" use customers // 2. Appending the key to the filename use customers<key_1,key_2,key_3> // 3. Using the ENCRYPTION clause, optionally specifying angled brackets use customers encryption "key_1,key_2,key_3" use customers encryption "<key_1,key_2,key_3>"
- SQL insert - add a row to a table
// The three part key can be specified using a // default encryption key before opening the table open database southwind set encryption to "key_1,key_2,key_3" insert into customers; (customerid, companyname); values ("LIANJ","Lianja Inc") // Or by appending the key to the filename open database southwind insert into customers<key_1,key_2,key_3>; (customerid, companyname); values ("LIANJ","Lianja Inc")
- SQL select - return data from a table or tables
// The three part key can be specified using a // default encryption key before opening the table open database southwind set encryption to "key_1,key_2,key_3" select * from customers // Or by appending the key to the filename open database southwind select * from customers<key_1,key_2,key_3>
- SQL update - update data in a table
// The three part key can be specified using a // default encryption key before opening the table open database southwind set encryption to "key_1,key_2,key_3" update customers; set companyname="Lianja Inc."; where customerid="LIANJ" // Or by appending the key to the filename open database southwind update customers<key_1,key_2,key_3>; set companyname="Lianja Inc."; where customerid="LIANJ"