PostgreSQL中基于ACL的数据访问控制技术  

TECHNIQUES ON ACL-BASED DATA ACCESS CONTROL IN POSTGRESQL

作　　者：张孝[1] 

机构地区：[1]中国人民大学信息学院数据与知识工程研究所,北京100872

出　　处：《计算机应用与软件》2007年第9期68-71,共4页Computer Applications and Software

摘　　要：数据库系统允许用户共享数据,但必须通过访问控制保证数据安全,防止数据的篡改、泄漏或丢失。PostgreSQL借助ACL(Access Control List)技术达到控制访问请求和信息保护的目的。该系统中的数据库对象都有一个ACL,只有出现在ACL中并且具有所需权限的用户才能够访问该对象。PostgreSQL将对象的ACL按抽象数据类型加以维护并用于访问控制,实现方法简洁,易于增强和扩展。它还通过用户组、ACL压缩等技术进一步优化数据访问控制的性能。同时对扩展列级授权给出建议。Different users can share the data in database. The access,however,is restrictive so as to protect data from being tampered,leakage or lost. Access control is implemented in a RDBMS, PostgreSQL, by means of ACL while data protection is addressed as well. Any database object in PostgreSQL has an ACL and the access to it is allowed provided that the user with the specific privilege（s） is contained in the ACL. ACL in PostgreSQL is defined as an abstract data type with high extensibility and ease to be put into practice. Moreover, some practical methods, taking group and compression of ACL for examples, are introduced into PostgreSQL to improve its performance. In addition, this paper presents some practical design guidances to provide the column-level authorization.

关 键 词：数据库安全 访问控制 权限 访问控制列表 ACL 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]