Feature idea: Dynamic Data Making

Riccardo Bassani wrote:

As SQL Server 2016 (
https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking
) , or Oracle does: it could be a neat feature having Dynamic Data
Masking, even if it has some limitations, it could help in the
application development, imho.

I know it's possible to put this logic in the application (if you look
in internet for "spring framework data masking" you find a lot of
results).

What do you think?
I know there is more important things to do (like partitioning or
parallelism), but it could be neat to see that in a future release .

Data masking is pretty important actually. Since you seem to have an
interest in seeing it done, care to submit a patch?

--
�lvaro Herrera https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

On Tue, Dec 05, 2017 at 09:59:22PM +0100, Riccardo Bassani wrote:

https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking

There's already at least 4 mechanismus that come to mind
which can do things like that:

on SELECT RULEs

VIEWs

column GRANTs

RLS

Karsten
--
GPG key ID E4071346 @ eu.pool.sks-keyservers.net
E167 67FD A291 2BEA 73BD 4537 78B9 A9F9 E407 1346

Sorry, I don't develop in C.
I could always learn how to develop in C, and how it works a DBMS, but
it will take some time :)

Anyway it's interisting to see some some people interested in that feature, too.

2017-12-05 22:03 GMT+01:00 Alvaro Herrera <alvherre@2ndquadrant.com>:

I will have a look, thank you for the tips!

2017-12-05 22:11 GMT+01:00 Karsten Hilbert <Karsten.Hilbert@gmx.net>:

On 12/5/2017 1:11 PM, Karsten Hilbert wrote:

On Tue, Dec 05, 2017 at 09:59:22PM +0100, Riccardo Bassani wrote:

https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking

There's already at least 4 mechanismus that come to mind
which can do things like that:

on SELECT RULEs

VIEWs

column GRANTs

RLS

yeah, but its so much cooler if you invent a bunch of proprietary
methods of doing the same thing, and give it new marketing buzzwords !!!

</microsoft>

--
john r pierce, recycling bits in santa cruz

On 12/05/2017 01:03 PM, Alvaro Herrera wrote:

Riccardo Bassani wrote:

As SQL Server 2016 (
https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking
) , or Oracle does: it could be a neat feature having Dynamic Data
Masking, even if it has some limitations, it could help in the
application development, imho.

I know it's possible to put this logic in the application (if you look
in internet for "spring framework data masking" you find a lot of
results).

What do you think?
I know there is more important things to do (like partitioning or
parallelism), but it could be neat to see that in a future release .

Data masking is pretty important actually. Since you seem to have an
interest in seeing it done, care to submit a patch?

I was recently discussing this with some other hackers, and the
consensus seemed to be that this should be implemented with a new kind
of POLICY that operates at the field level. We didn't go into much
detail beyond that though.

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development