Finegrained Access Control to Web Databases对网络数据库的细粒度访问控制.pptVIP

Our Parameterized View The main requirement is that the parameter will be difficult to fake The application will be authorized to parameterized views only In the parameterized view, the parameter will contain the identity of the user We present two design solutions for the parameterized views: Application Session Key parameter Rolling Key parameter For details See our SACMAT2007 paper Application Session Key A user requests to perform a process of identification when she provides a username and a password to the application The application runs a DB stored procedure that accepts the users user