Results 1 to 3 of 3
  1. #1
    Join Date
    Sep 2017
    Posts
    2

    Unanswered: Mutli Tenant Dbase Environment - Security

    Hi all,

    I've been tasked with doing some research on our third party hosted multi tenant dbase server. One of our clients would like the ability to create and run custom reports against his tenant dbase (the server hosts 5 tenants all in their own dbases). What we want to find documentation on, is whether or not there are any inherent dangers in providing this access to this client in regards to him being able to access other tenants data. Any thoughts or links you may have are greatly appreciated.

  2. #2
    Join Date
    Jan 2003
    Location
    Massachusetts
    Posts
    5,863
    Provided Answers: 17
    It all depends on what permissions you grant them. I expect for a report user, they would only get read-only access to their own database, and no rights on any of the other tenants' databases. Once you set something up, you should test it out, and see what the user can do (or not do).

    One of the major dangers of letting a user do ad-hoc queries, is they may end up running some really bad SQL statements, and take down the application by either eating up all the CPU, or causing blocking.

  3. #3
    Join Date
    Sep 2017
    Posts
    2
    Thank you! That is the general consensus we are getting.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •