[GemStone-Smalltalk] Production only code

Dirk Nel dirkockertnel at gmail.com
Tue Sep 14 23:48:35 PDT 2021


Thanks for the replies guys

I only saw this now as my Smalltalk/Gemstone mails go to a folder that I
always forget to check :(

But I appreciate the replies!  In the end I found a solution.  I will post
what I did here when I have a bit more time and you can critique it :)

Thankful for the community
Dirk

On Tue, 13 Jul 2021 at 23:16, Jaroslaw Podgajny <j.podgajny at gmx.net> wrote:

> Hi Dirk,
> On 13/07/2021 11:43, Dirk Nel via GemStone-Smalltalk wrote:
>
> Hi all
>
> I'm currently working on some data anonymization stuff in our GemStone
> production database.  I'm thinking of strategies of having certain portions
> of code just running in the prod Db.  As we restore our prod Db into our
> test Db this is difficult.  One idea that I had was to let the code that
> should only run in prod live in topaz scripts on the host instead of in the
> Db.  Any other thoughts about this out there?  And maybe just about data
> anonymization and Gs in general?
>
> One solutions would be so called Tokenization. You would create mapping to
> consistently transform confidential data from one string/token to another,
> e.g. 'Mitsubishi' translated into 'Zork Company'. This process would run as
> part of your test DB bootstap code. One advantage of this solution is
> preservation of human readability of data. A disadvantage is costly nature
> of the transformation if the data set is not normalized, i.e. strings are
> refrerenced directly rathern than via a unique container Counterparty
> object, as an example). Additionally naive equality tests in the code would
> fail in test, which is probably a good thing ;).
>
> Another option that does not suffer from costly performance
> characteristics of Tokenization is so called Application Level Encryption.
> In this solution you encrypt your confidencial data and only provide access
> to the key in the production environment. In your test DB environment users
> would only see the crypto strings. One of the disadvantages is that the
> data is no longer human readable. There is also a whole domain of
> complexity around key management to deal with.
>
>
> Regards,
>
> Jaroslaw.
>
>
> Regards
> Dirk
>
>
>
> _______________________________________________
> GemStone-Smalltalk mailing listGemStone-Smalltalk at lists.gemtalksystems.comhttps://lists.gemtalksystems.com/mailman/listinfo/gemstone-smalltalk
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gemtalksystems.com/mailman/archives/gemstone-smalltalk/attachments/20210915/812377d6/attachment.htm>


More information about the GemStone-Smalltalk mailing list