C10-Brazilian-e-commerce-modeling-team / brazilian-e-commerce

0 stars 6 forks source link

chore: Establish the data connection technique for the data analysis #9

Closed felipesaldata closed 2 years ago

felipesaldata commented 2 years ago

Summary 💡

Determining the features, roles and permissions to get database queries in order to analize the data.

Acceptance Criteria

felipesaldata commented 2 years ago

Alternatives to access the Database

Until now, the best alternative for the database deployment is AWS , because it has S3 Bucket and we can use Redshift to manage our DB and all the roles we need (@GabyGO2108 , ¿Can you help us validate this with your issue #8 ?) @danieldhats7 and i will be working with this

felipesaldata commented 2 years ago

Structure of roles and permissions of the project

A User-Role structured is required as a good practices for the management of the databases, not everyone require the same features for the use of the DB, and limitating the roles is also risk managment security layer.

This is the most common database role distribution

Fixed-Database role name | Description -- | -- db_owner | Members of the db_owner fixed database role can perform all configuration and maintenance activities on the database, and can also drop the database in Server. db_securityadmin | Members of the db_securityadmin fixed database role can modify role membership for custom roles only and manage permissions. Members of this role can potentially elevate their privileges and their actions should be monitored. db_accessadmin | Members of the db_accessadmin fixed database role can add or remove access to the database. db_backupoperator | Members of the db_backupoperator fixed database role can back up the database. db_ddladmin | Members of the db_ddladmin fixed database role can run any Data Definition Language (DDL) command in a database. db_datawriter | Members of the db_datawriter fixed database role can add, delete, or change data in all user tables. db_datareader | Members of the db_datareader fixed database role can read all data from all user tables and views. User objects can exist in any schema except sys and INFORMATION_SCHEMA. db_denydatawriter | Members of the db_denydatawriter fixed database role cannot add, modify, or delete any data in the user tables within a database. db_denydatareader | Members of the db_denydatareader fixed database role cannot read any data from the user tables and views within a database. **(this one could be optional for our project)**

And this are the permissions of the corresponding roles

Permissions of the Databases roles

felipesaldata commented 2 years ago

The currrent version (branch database) of the database creation, transformation and loading is working with the given data ✅.

felipesaldata commented 2 years ago