Data Management (DMS) allows you to manage the security rules for relational and non-relational databases on the SQL Console tab. The definition and classification of security rules on this tab are different for relational and non-relational databases. This topic describes how to configure security rules for Redis databases on the SQL Console tab.
Checkpoints on the SQL Console tab
|Permission Execution Statement Criteria||Allows you to set constraints on the permissions for command execution. For example, you can configure this checkpoint so that DMS checks whether a user has required permissions on a database, table, or column when the user submits a command to perform operations on the object.|
|Statement Criteria: Keys||Allows you to set constraints on key-related commands.|
|Statement Criteria: String||Allows you to set constraints on string-related commands.|
|Statement Criteria: List||Allows you to set constraints on list-related commands.|
|Statement Criteria: SET||Allows you to set constraints on set-related commands.|
|Statement Criteria: SortedSet||Allows you to set constraints on sorted set-related commands.|
|Statement Criteria: Hash||Allows you to set constraints on hash table-related commands.|
|Statement Criteria: Cpc||Allows you to set constraints on TairCpc commands.|
|Statement Criteria: Ts||Allows you to set constraints on TairTS commands.|
|Statement Criteria: Roaring||Allows you to set constraints on TairRoaring commands.|
|Statement Criteria: Search||Allows you to set constraints on TairSearch commands.|
|Statement Criteria: Other||Allows you to set constraints on commands of other types.|
The following flowchart shows how checkpoints work.
Factors and actions
- A factor name consists of the prefix
@fac.and the display name of the factor.
- Each tab on the Details page of a security rule set displays different factors for different checkpoints.
|@fac.cmd_type||The type of the command. For more information about valid values, see Redis commands supported by DMS.|
|@fac.env_type||The type of the environment. The value is the display name of the environment type,
|@fac.is_read||Indicates whether the current command is a read command. Valid values:
|@fac.is_write||Indicates whether the current command is a write command. Valid values:
|@fac.current_sql||The current SQL statement.|
|@fac.user_is_admin||Indicates whether the current user is a DMS administrator. Valid values:
|@fac.user_is_dba||Indicates whether the current user is a database administrator (DBA). Valid values:
|@fac.user_is_inst_dba||Indicates whether the current user is a DBA of the current database instance. Valid
- An action name consists of the prefix
@act.and the display name of the action.
- Each tab on the Details page of a security rule set displays different actions for different checkpoints.
|@act.reject_execute||Rejects the execution of the current SQL statement.|
|@act.allow_execute||Allows the current SQL statement to be executed.|
Redis commands supported by DMS
The following table describes the command types and commands that DMS can recognize based on syntax analysis.
|Key-related read command||
|Key-related write command||
|String-related read command||
|String-related write command||
|List-related read command||
|List-related write command||
|Set-related read command||
|Set-related write command||
|Sorted set-related read command||
|Sorted set-related write command||
|Hash table-related read command||
|Hash table-related write command||
|Server read command||
|TairDoc command||For more information about TairDoc commands, see TairDoc.|
|TairString command||For more information about TairString commands, see TairString.|
|TairBloom command||For more information about TairBloom commands, see TairBloom.|
|TairGIS command||For more information about TairGIS commands, see TairGIS.|
|TairHash command||For more information about TairHash commands, see TairHash.|
|TairCpc command||For more information about TairCpc commands, see TairCpc.|
|TairTS command||For more information about TairTS commands, see TairTS.|
|TairRoaring command||For more information about TairRoaring commands, see TairRoaring.|
|TairSearch command||For more information about TairSearch commands, see TairSearch.|