@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix knobit: <https://knobit.org/id/knobit/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix register: <https://knobit.org/id/register/> .
@prefix schema: <https://schema.org/> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .

knobit:S-304 a edu:Knobit ;
    rdfs:label "Recognises masking a join can undo"@en ;
    dcterms:identifier "S-304" ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    dcterms:source "Review checklist 03-access-control, row 4 (27002 8.11)"@en ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/knobit/data-security/03-access-control/04> ;
    skos:altLabel "Masking a join can undo"@en ;
    skos:definition "A masked column next to an unmasked key that joins to the unmasked source."@en ;
    skos:prefLabel "Recognises masking a join can undo"@en ;
    edu:actionVerb "Recognises"@en ;
    edu:appliesKnowledge knobit:K12-69062,
        knobit:S-353 ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: MK-001 masks `customer_view.name`; the view exposes `personal_code`, which joins to `party` in clear Acceptable: Key masked or tokenised in the view too"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:expectedResult "The masked column, the key and the clear table it reaches"@en ;
    edu:followedBy knobit:S-332 ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState>,
        <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:targetObject "masked column next to an unmasked key joining to clear data"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf register:data-security .

edu:Knobit rdfs:label "Knobit"@en,
        "Knobit"@et .

knobit:K12-69062 rdfs:label "Explains how database tables and relationships are structured"@en,
        "Selgitab andmebaasi tabelite ja seoste ülesehitust"@et .

knobit:S-332 rdfs:label "Closes the clear-text paths around a masked column"@en .

knobit:S-353 rdfs:label "Explains data masking and its limits"@en .