v1.1
Security
Uqbar time-series database provides user management, authentication, and encrypted transmission capabilities.
Separation of Duties
Separation of duties can be set to prevent system administrators from having excessive centralized permissions, which may cause high risks. Some permissions of the system administrator are transferred to the security administrator and audit administrator, implementing separation of duties among the system administrator, security administrator, and audit administrator.
- After separation of duties is enabled, system administrators have the permissions only for the objects owned by them.
- After separation of duties is enabled, security administrators have the permissions to create roles and users.
- After separation of duties is enabled, audit administrators have the permissions to view and maintain database audit logs.
Authentication Mode
- Host-based authentication: A server checks the configuration file based on the IP address, username, and target database of the client to determine whether the user can be authenticated.
- Password authentication: A password can be an encrypted password for remote connection or a non-encrypted password for local connection.
- SSL encryption: The OpenSSL is used to provide a secure connection between the server and the client.
Encryption and Transmission Mode
- SSL can be used for TCP or IP connection.
- The SSH channel can be used for TCP or IP connection.