On 3/7/15 2:18 PM, Nicola Vitucci wrote:
Dear all,

I could not figure out any way to use ACLs to avoid showing private
graphs when submitting the following query:

SELECT DISTINCT ?g WHERE {GRAPH ?g {?s ?p ?o}}

The query should not be changed, so I was hoping to be able to do it via
graph-level permissions and/or pragmas. Is it possible to do this at all?

Thanks a lot,

Nicola


Via SQL Command Line or Conductor UI (HTML based Administrator):

-- Add a named graph to the private (protected) graph group

DB.DBA.RDF_GRAPH_GROUP_INS ('http://www.openlinksw.com/schemas/virtrdf#PrivateGraphs','{named-graph-iri') ;

-- To ensure user sql role account 'nobody' doesn't have access to private graphs execute:

DB.DBA.RDF_DEFAULT_USER_PERMS_SET ('nobody', 0, 1);

-- To ensure that services running under user/role account 'SPARQL' don't have access to private graphs (denoted using 1).

DB.DBA.RDF_DEFAULT_USER_PERMS_SET ('SPARQL', 0, 1);

Links:

[1] http://docs.openlinksw.com/virtuoso/rdfgraphsecurity.html -- documentation section on graph level security .

--
Regards,

Kingsley Idehen 
Founder & CEO
OpenLink Software
Company Web: http://www.openlinksw.com
Personal Weblog 1: http://kidehen.blogspot.com
Personal Weblog 2: http://www.openlinksw.com/blog/~kidehen
Twitter Profile: https://twitter.com/kidehen
Google+ Profile: https://plus.google.com/+KingsleyIdehen/about
LinkedIn Profile: http://www.linkedin.com/in/kidehen
Personal WebID: http://kingsley.idehen.net/dataspace/person/kidehen#this


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Virtuoso-users mailing list
Virtuoso-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/virtuoso-users

Reply via email to