6 - NonStop SQL and Database Security

Abstract

The chapter summarizes SQL concepts and uses SQL database terms that relate to securing SQL databases on the HP Non-Stop Server. Database security ensures uninterrupted and flexible database access to appropriate users in proper locations while limiting or denying access from unauthorized users or improper locations. Each organization's database security ultimately includes whatever access, confidentiality, control, auditability, and account- ability components that are pertinent to its situation. The relational database management system model is the most popular approach to building and querying corporate databases. The model deals with relationships between database objects. In a relational DBMS, database objects typically include tables, views, indexes, SQL-invoked routines, and user-defined types. The chapter t introduces ANSI SQL and Non-Stop SQL Security; and it also provides a comparison between SQL/MP and SQL/MX. ANSI SQL standards generally deal with three entities: objects, actions, and users. Non-Stop SQL/MX is based on ANSI SQL-92 DML compliance, which developed new object naming rules and introduced stronger security access control standards based on the GRANT/REVOKE model. It also defines level of the SQL database, constraint levels of SQL columns and/or base tables, and SQL Security features and limitations. The other topics covered in the chapter are encrypting database data, auditing database operations, security choices available in hardware and software, compiling and running nonstop SQL programs, and MXCS access authorization. There are certain utilities that affect and are affected by SQL: remote database facility (RDF) , TMF, and file utility program (FUP).