Company
Date Published
Author
Ian McCloy, Director Product Management
Word count
2108
Language
English
Hacker News points
None

Summary

Couchbase Server 7.0 enhances data security by introducing Scopes and Collections, facilitating better mapping between relational and NoSQL data models, and allowing more granular role-based access control (RBAC) down to the level of individual Scopes and Collections. Previously, RBAC in Couchbase was applied at the cluster-wide or per-Bucket level, but the new update enables users to set permissions more precisely, aligning with the principle of least privilege. For example, a partner like Acme Co. can now be restricted to access only hotel data within a specific Collection, rather than the entire travel data set. This is achieved by the flexibility offered by Scopes, which act like schemas in relational databases, and Collections, which organize JSON documents akin to tables. The update also ensures backward compatibility with a default Scope and Collection, while encouraging new applications to leverage the named Collections for better data organization. Additionally, users can test the enhanced RBAC capabilities with hands-on examples, such as setting specific data reader roles for users on defined Collections, ensuring secure and efficient data access management in Couchbase clusters.