3 ms·
Many distributed db doesn't have role based access control? Imaging I want to build a p2p forum. There is an administrator, multiple moderators, members and vi
by billconan 4y ago
Many distributed db doesn't have role based access control?
Imaging I want to build a p2p forum. There is an administrator, multiple moderators, members and visitors.
Visitors can only have read access. members can post, moderators can delete. administrator can promote members to moderators.
Can this be supported by distributed db?
I have checked a few, I didn't see they support that. Most assume the peers have the same permissions to access the db. They may be useful in a trusted environment, not in a untrusted environment.
- not_a_noogler 4y agohttps://www.datastax.com/blog/role-based-access-control-cassandra https://www.datastax.com/blog/role-based-access-control-cass...
- billconan 4y agoI don't think it can work under untrusted environment. But I'm not sure.
- billconan 4y agofor example, according to https://www.reddit.com/r/Bitcoin/comments/3c7tma/any_thoughts_to_compare_apache_cassandra_to/ https://www.reddit.com/r/Bitcoin/comments/3c7tma/any_thought... Apache Cassandra is a database used by Facebook. It has converging databases. If you're used to normal SQL databases, it would be like a way of replicating information across lots of copies. Updates are done in really strange ways. Imagine a Facebook comment or status update. That gets a time associated with the data, and the database copies slowly converge to a common truth. > gets a time associated with the data it's easy to fake a timestamp in an untrusted network.
- deleted 4y ago[deleted]
- jqpabc123 4y agoMany distributed db doesn't have role based access control? These are developer tools, not end user apps. They aren't designed for direct exposure to end user validation. Most apps making use of a distributed db have a UI of some sort that can act as proxy to implement access control.