Skip to content

Commit

Permalink
Update deploy.md
Browse files Browse the repository at this point in the history
  • Loading branch information
louisdorard authored Sep 27, 2024
1 parent 9e3e034 commit da63e38
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/deploy.md
Original file line number Diff line number Diff line change
Expand Up @@ -98,8 +98,8 @@ FOR EACH ROW EXECUTE PROCEDURE prevent_updates();
### Protecting the editlog from interference

* The credentials used to write to the editlog have limited permissions. An audit trail from the database provider helps ensure that these permissions aren't altered.
* These credentials are not known by the Dataiku project designer, so they can't write to the database by sending requests directly to it.
* The only way for the project designer to tamper with the editlog is to make changes to the webapp code which leverages the Connection that writes to the database. Dataiku Govern guards around deploying projects that were tampered with (either at the Flow level, or at the Webapp and code level).
* The Dataiku project designer does not know these credentials, so they cant write to the database by sending requests directly to it.
* The only way for the project designer to tamper with the editlog is to make changes to the webapp code which leverages the Connection that writes to the database. Dataiku Govern guards against deploying projects that were tampered with (either at the Flow level, or at the Webapp and code level).

### Restricting access to the webapp

Expand Down

0 comments on commit da63e38

Please sign in to comment.