Proper Nouns, secure DB
Posted in 1991
Hi. A couple of old chestnuts, hopefully. FIRST: I've got a database with a list of guys/girls in it. Naturally, they like their names to come out as "Joe Bloggs", or equiv., with capitals in the correct places, on reports and (ok, being optimistic) interactive queries. However, if they want to run a query against the DB, they want their names to match as "joe bloggs", or "Joe Bloggs", or "JOE BLOGGS". The data can easily be kept as capitals only, or lower-case only, and can easily be displayed as upper (after every non-alpha char upshift ?) - but is this sufficient ?. I'd like to index on first and last names and run queries that use the index, but cover as many cases as possible (O'Farrell, McAlister for example). Does anyone have a really good solution ? SECOND: Without going to high-security Unix, has anyone investigated DB security options ? I'd love to hear if you have. I considered crypt'ing everything, but it makes joins on integer fields a bit difficult (they're crypt'd chars, perhaps, which doesn't help much if you started with a SERIAL column). The other problem with this is that, if you lose the crypt key, you lose the database (or crack it on a Cray, slowly). What I'd like is protection against (possibly unskilled) root-privilege users. Any ideas ? BTW. 10% ethanol is not the correct answer to either question. -- Cheers - Tony. ____________________________________________________________________________ Tony Heskett: theskett@lhr-sys.ssf-sys.dhl.com | Vox: (+44) 81 747 8330 DHL Systems : Kings House, Great West Road, TW8 9HS | Fax: (+44) 81 747 0875