Security is one of the top priorities for a database. A database management system is required to prevent unauthorized use of the database and protect the files and data of the database. This topic describes the security system of OceanBase Database.
As the final data carrier, OceanBase Database prioritizes data security. OceanBase Database provides a full range of enterprise-level security features to ensure data security. The security features include authentication, access control, data encryption, monitoring and alerting, and security audit.
Authentication
OceanBase Database supports authentication and user and role management to improve database security. For more information, see Authentication.
Access control
OceanBase Database manages user access to data by defining system and object privileges and roles. For more information, see Access control.
Data encryption
OceanBase Database supports data transmission and storage encryption. OceanBase Database supports end-to-end data encryption at the transport layer. In addition, OceanBase Database supports transparent encryption of stored data to maximize data security even when the storage medium is lost. For more information, see Data transmission encryption and Data storage encryption.
Applicability
OceanBase Database Community Edition does not support transparent data encryption.
Security audit
OceanBase Database audits user behaviors and records all user operations. OceanBase Database also supports the audit of database objects. Audit information is generated when you access data to ensure that data access behaviors are correctly recorded. For more information, see Security audit.
Applicability
OceanBase Database Community Edition does not support security audit.