Authorization Policies for Materialized Views

Abstract

Part 13: Short PapersInternational audienceIn this paper, we propose a novel approach to facilitate the administration of access control policies to ensure the confidentiality of data at the level of materialized views. A materialized view stores both the definition of the view and the rows resulting from the execution of the view. Several techniques and models have been proposed to control access to databases, but to our knowledge the problem of automatically generating from access control policies defined over base relations the access control policies that are needed to control materialized views is not investigated so far. We are dealing with this problem by resorting to an adaptation of query rewriting techniques. We choose to express fine-grained access control through authorization views

Access control to materialized views

“…The properties of this inference system and the efficient evaluation algorithm were not investigated and remain an open research issue. In [7], the authors have built on [9] to provide a way to select access control rules to be attached to materialized view definitions based on access control rules over base relations. They resort to the basic form of the bucket algorithm which does not allow to derive all relevant access control rules.…”

“…In this context, ensuring security at the materialized view level is as important as ensuring security on database tables. Based on our previous work [9], we propose a novel approach that facilitate the administration of the access control rules to ensure the confidentiality of data at the level of materialized views. We compute new rules based on predefined access control rules defined over base relations.…”