This HTML5 document contains 32 embedded RDF statements represented using HTML+Microdata notation.

The embedded RDF content will be recognized by any processor of HTML5 Microdata.

Subject Item

n7:this

foaf:made

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

Subject Item

n15:this

sioc:creator_of

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

Subject Item

n12:item

n13:services_of

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

Subject Item

n16:this

sioc:creator_of

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

Subject Item

n5:VOS

sioc:container_of

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

atom:entry

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

atom:contains

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

Subject Item

n2:VOSIndex

sioc:links_to

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

Subject Item

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

rdf:type

sioct:Comment atom:Entry

dcterms:created

2017-06-13T05:45:21.407949

dcterms:modified

2017-06-13T05:45:21.407949

rdfs:label

VirtTipsAndTricksGuideGraphSecurityLevelSQL

foaf:maker

n7:this n19:this

dc:title

VirtTipsAndTricksGuideGraphSecurityLevelSQL

opl:isDescribedUsing

n10:rdf

sioc:has_creator

n16:this n15:this

sioc:content

%META:TOPICPARENT{name="VirtTipsAndTricksGuide"}% ---+How to manage Graph Security Level for SQL Clients? ---++What? Graph Security Level for ODBC, JDBC, ADO.NET, OLE-DB SQL Clients. ---++Why? SPARQL-level graph security is sufficient for SPARQL client operating over HTTP. It is not sufficient for SQL clients due to the fact that graph level security is baked into the SPARQL compiler, not by an SQL compiler. The Virtuoso SPARQL compiler analyzes the graph-level permissions of a user (an identity principal named using an identifier e.g., WebID or NetID). For each triple pattern or graph group pattern the compiler adds an implicit <code>FILTER ()</code> that ensures that appropriate privileges are granted on target named graphs to a given user. Ultimately, these FILTERs becomes part of the generated SQL code processed against the RDF_QUAD and related RDF data management system tables. SQL users accessing Virtuoso via ODBC, JDBC, ADO.NET, and OLE-DB connections have the ability to execute arbitrary SQL code via stored procedures, subject to SQL level privileges on target Tables and Views which provides a point of vulnerability to the RDF system tables (RDF_QUAD and others). To close this vulnerability, the SQL compiler restricts SQL connection access, in regards to RDF system tables, to members of the <code><nowiki>SPARQL_SELECT_RAW</nowiki></code> group. <i><b>Note</b>: <code><nowiki>SPARQL_SELECT_RAW</nowiki></code> group is a feature applicable to Virtuoso 7.5 or higher.</i> ---+++Usage Example The following example demonstrates how to grant <code><nowiki>SPARQL_SELECT_RAW</nowiki></code> to a Virtuoso SQL user: <verbatim> SQL> DB.DBA.USER_CREATE ('John', 'John'); Done. -- 0 msec. SQL> GRANT SPARQL_SELECT to "John"; Done. -- 0 msec. SQL> GRANT SPARQL_SELECT_RAW to "John"; Done. -- 0 msec. </verbatim> ---++Related * [[VirtTipsAndTricksGuide][Virtuoso Tips and Tricks Collection]] * [[VirtRDFGraphsSecurity][RDF Graph Security in Virtuoso]]

sioc:id

5bf7d050c696bc5f8d3d4d7de0898dd8

sioc:link

n2:VirtTipsAndTricksGuideGraphSecurityLevelSQL

sioc:has_container

n5:VOS

n13:has_services

n12:item

atom:title

VirtTipsAndTricksGuideGraphSecurityLevelSQL

sioc:links_to

n14:WebID n14:NetID

atom:source

n5:VOS

atom:author

n7:this

atom:published

2017-06-13T05:45:21Z

atom:updated

2017-06-13T05:45:21Z

sioc:topic

n5:VOS