Data access control method and database access device

Abstract

The embodiment of the invention discloses a data access control method and a database access device, relates to the field of data storage, can provide a safety guarantee for data access, and avoids aninformation leakage risk to a certain degree. The method comprises the following steps that: obtaining a first data operation instruction (which carries the identification of a target data volume), wherein the instruction is triggered by a first user; according to the identification of the target data volume, inquiring permission setting information, and determining the permission of the first user to operate the target data volume, wherein the permission setting information comprises the identification of at least one data volume and permission for at least one user (which comprises the target data volume) to operate at least one data volume (including the first user); according to the permission for the first user to operate the target data volume and the first data operation instruction, generating a second data operation instruction; and executing the second data operation instruction, and operating the data of the target data volume in a target range, wherein the target range isa range permitted by the permission that the first user operates the target data volume.

Description

technical field [0001] The embodiments of the present application relate to the field of data storage, and in particular, to a data access control method and a database access device. Background technique [0002] Database (Database) is a warehouse that organizes, stores and manages data according to the data structure. Users can perform operations such as adding, intercepting, updating, and deleting data in the Database. [0003] Generally, users can write Structured Query Language (Structured Query Language, SQL) codes to query the Database and export report data therefrom. A database administrator (Database Administrator, DBA) often can only set permissions for users, such as prohibiting user A from accessing table 1, and the prior art cannot restrict users from specific operations on data in a certain table. In this way, user A may be able to view all the data except Table 1, which can easily cause great information security risks for some high-tech, information, financ...

AI Technical Summary

Problems solved by technology

A database administrator (Database Administrator, DBA) often can only set permissions for users, such as: prohibit user A from accessing table 1, and the existing technology cannot restrict users from specific operations on data in a certain table

In this way, it is possible that user A can view all the data except Table 1. For some high-tech, information, financial and other industries, it is easy to cause great information security risks

Images