encryption - Encrypting data in oracle database -

-

what ways in data can encrypted? example salary column, admin should not able see encrypted columns if possible, data should visible through application users have access defined in application, changes in application (adding new functionality encrypt/decrypt @ application level) last resort , minimal.

so far have thought of 2 ways fresh ideas or pros , cons of ones below appreciated: 1. using oracle tde (transparent data encryption). - con : admin can possibly grant himself rights see data 2. creating trigger encrypt before insert , along lines of pipeline retrieve.

oracle database vault way prevent dba being able access data stored in database. cost product, however, , requires have additional set of security admins job grant dbas whatever privileges need.

barring that, you'd looking @ solutions encrypt , decrypt data in application outside database. involve making changes database structure (i.e. salary column declared raw rather number). , involves application changes call encryption , decryption routines. , requires solve key management problem these sorts of solutions fail. storing encryption key somewhere application can retrieve somewhere no admin can access non-trivial. , need ensure key backed , restored separately since encrypted data in database useless without key.

most of time, though, i'd tend suggest right approach allow dba see data , audit queries run instead. if see 1 particular dba running queries fun rather looking @ bits of data in course of doing job, can take action @ point. knowing queries being audited enough keep dba accessing data doesn't need.


Comments

Post a Comment

Popular posts from this blog

database - VFP Grid + SQL server 2008 - grid not showing correctly -

-
i having problem, have grid called "gridbasica" , this: thisform.gridbase.recordsource = "sgviemp" sgviemp cursor made executing select sqlserver command sqlexec. when want modify registry, go form , the update there. so, when come form grid, grid isnt grid anymore, big white rectangle. reading around said: delete recordsource , asingt again. thisform.gridbase.recordsource = "" *--i sqlexe here thisform.gridbase.recordsource = "sgviemp" i , works, but, when click button modify again cursos updated modify form doesnt load fields did first time. could me out that? thanks in advance. --------------- edit ------------------ i have been doing recommended: lnselect = select(0) n = sqlexec(thisform.conexion,"select emp_ccodigo codigo, emp_cnombre 'nombre o razon social', emp_cnumrif 'r.i.f' sgviempr","sgviemp1") set echo on suspend select sgviemp zap in sgviemp *-- browse *--zaps correct
Read more

jquery - Set jPicker field to empty value -

-
im using jpicker color selector in form. have clear value set window/icon 'no color selected' state. i've tried following: $(':input[name="color"]').val(''); //access value directly. (does not affect jpicker) 2: $.jpicker.list[0].color.active.val('hex', '', this); //set color black , input value 000000, instead of empty string 3: $.jpicker.list[0].color.active.val(null, '', this); //does nothing none of 3 methods seems behave properly. in advance. this works me :) $.jpicker.list[0].color.active.val('v', null); here example: http://jsfiddle.net/3up7n/
Read more

.htaccess - htaccess convert request to clean url and add slash at the end of the url -

-
ok , searched more 4 days , more 20 posts here in stach or in websites without kind of success first here htaccess file rewriteengine on rewriterule ^([a-za-z0-9_]+)/?$ index.php?page=$1 [nc] rewriterule ^([a-za-z0-9_]+)\/([a-za-z0-9_]+)\/?$ index.php?page=$1&action=$2 [nc] i tried many codes 1 worked me can call request , works me www.example.com/pagename => www.example.com/index.php?page=pagename here questions , please provide me information "in detail" understand code well 1- how convert request automatically www.example.com/index.php?page=pagename www.example.com/pagename 2- if tried add slash @ end shows me page without images or styling mean www.example.com/pagename => works www.example.com/pagename/ => doesn't work that's :) for first part need 301 rule this: rewritecond %{the_request} /index\.php\?page=([^\s&]+) [nc] rewriterule ^ /%1? [r=301,l] for second part use absolute path in css, js, images files r
Read more