US 10,540,508 B2 · Method and apparatus for securing a database configuration

Abstract

One embodiment of the present invention provides a system that secures a database configuration from undesired modifications. This system allows a security officer to issue a configuration-locking command, which activates a lock for the configuration of a database object. When a configuration lock is activated for a database object, the system prevents a user (e.g., a database administrator) from modifying the configuration of the database object, without restricting the user from accessing the database object itself. The security officer is a trusted user that is responsible for maintaining the stability of the database configuration, such that a configuration lock activated by the security officer preserves the database configuration by overriding the privileges assigned to a database administrator.

Claims20

Dependent claims

A computer-implemented method, comprising:

receiving a user command executable by a database management system (DBMS);
determining that the user command invokes a first lock, which is facilitated by the DBMS, for a first role defined in a database, wherein the first lock is a configuration lock that prevents any database user from granting or revoking the first role in the database;
in response to the determination, applying, by the DBMS, the first lock in the database to the first role;
and
in response to receiving any command that requests a grant or revocation of the first role or a grant or revocation of a second role that is an ancestor role of the first role, preventing the command from being executed on the DBMS.

2 more elements

Dependencies are inferred from the claim text.

Method and apparatus for securing a database configuration

Life of this patent

Method and apparatus for securing a database configuration

Life of this patent

Abstract

Claims20