Is there a similar Veil plugin for MySQL?

We have a MySQL database and would like to have database level security at the database level. I am playing around with the Veil plugin for PostgreSQL and how what does it do. Is there something similar for MySQL so we don't need to convert it to PostgreSQL?

Update

It is not that we will use veil or its MySQL equivalent for authentication, but define which rows will be displayed for an already authenticated user. User privileges are based on relational context. Without touching us with the plug-in, how efficient would a view where user privilege is based on multiple joins in a 100K row table would be? The ultimate goal is to be able to display different data to two different users based on the individual user privileges for rows in a 100K row table using the same query.

+2


a source to share


1 answer


This is not a common feature, mainly because in most cases it is not the right place for this security system. If you can provide more details on the exact attack you are trying to defend, there may be a better secuirty system to fill that requirement.

Typically you are trying to restrict a specific user based on the implementation of an access control list that the application dictates. There are times when you want two apps to use the same data and you want to limit the impact of compromising one of the apps. In this case, you can split it and give 1 read access to the application for the database and the other one for write or read / write access. Using built-in database access control, you can securely transfer information between applications. The main threat that is being protected is that if one application has been compromised by a vulnerability such as SQL Injection , both bases will also be attacked.



There is also sepgsql , which is also PostgreSQL. This secuirty system can be used to better separate applications with some dependent data, but this is a very unusual software requirement. In general, this secuirty system should be avoided in favor of other more common and proven systems.

+1


a source







All Articles