SE Radio 561: Dan DeMers on Dataware

Dynamic Access

Dynamic access control in dataware systems ensures that access permissions are consistently enforced across multiple applications. Dan DeMers explains that this approach allows for rules, such as salary visibility, to be dynamically adapted as organizational roles change, ensuring that data access remains secure regardless of the application used 1. This system operates under the credentials of the end user rather than the application, preventing unauthorized data access even if an application is flawed 1. Jeff Doolittle highlights the importance of auditing these controls independently to maintain security 1.

It's one of those things that, until you take a step back and realize it's actually just impossible to have consistency of controls in any organization of any complexity, which is pretty damn scary.

--- Dan DeMers

This consistency is crucial in complex organizations where traditional methods struggle to maintain control over data access 2.

   

Data Dynamics

Data control dynamics in dataware involve treating control data as part of the data itself, allowing for granular and temporal control over access 3. Dan DeMers emphasizes that this approach extends protections to all forms of data, including metadata, ensuring comprehensive security 3. This method challenges traditional concepts of data ownership, suggesting that data should not be confined within applications but rather exist as a separate, federated plane 4.

How can data be owned by an application? State can be owned by an application, but business information, it just doesn't make sense.

--- Dan DeMers

This separation allows for more flexible and scalable data management, akin to a network of connected services 4.