访问控制耶拿 TDB OWL
我使用jena TDB来存储我的本体,并且我想限制用户的访问,例如使用tdb文件系统我不知道是否可以控制访问 感谢您的帮助
I use jena TDB to store my ontology, and I want to limit access to users, such as using a tdb file system I do not know if i can contol the access
thanks for your help
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
TDB 存储没有内置访问控制。这是因为访问控制与身份和授权密切相关(您必须知道查询发出者是谁以及允许或禁止他们做什么),并且这是特定于应用程序的。例如,耶拿对应用程序如何处理用户身份进行规定是没有意义的。
有一些方法可以在 RDF 存储之上构建来添加安全层。例如,ISWC 2009 的这篇论文 显示了一种方法,您可以从 对该论文的引用或通过 Google 。为了获得更全面的安全性,您还应该确保 TDB 文件和目录在操作系统级别具有适当的访问限制,以防止攻击者通过发出命令行查询来规避应用程序级安全性。
There is no built-in access control to a TDB store. This is because access control is closely tied to identity and authorisation (you have to know who a query issuer is and what they are permitted or banned from doing), and this is application specific. It wouldn't make sense for Jena to be prescriptive about how your application handles user identity, for example.
There are approaches that build on top of RDF stores to add a security layer. For example, this paper from ISWC 2009 shows one way to do it, and you can find various others from the citations of that paper or via Google. For more all-round security, you should also ensure that the TDB files and directory have appropriate access restrictions at the OS level, to prevent an attacker from circumventing application-level security by issuing command-line queries.