C1 (2 points)
https://knobit.org/id/task/dsec-access-control/C1
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dsec-access-control/C1 |
| rdfs:label | C1 (2 points) en |
| schema:hasPart | dsec-access-control C1: the analyst's masked personal code is joinable to the clear customer table |
| schema:hasPart | dsec-access-control C1: the join path closed |
| schema:identifier | C1 |
| schema:position | 1 |
| schema:text | The masking bypass, 1 each. (a) The data analyst role sees personal_code masked in analytics_customer_view, but also reads crm_customer, which holds personal_code in clear with the same customer_id: a join on customer_id undoes the mask. The answer finds it. (b) It closes the path: read_crm_customer removed from the analyst role (the analyst's duties do not need it), or crm_customer masked for the role, or customer_id replaced by a token in the view - not just a note. en |