Re: Cluster Configuration

[Darren Cresswell]

That is something I didnt consider, However at first thought - it would not seem to solve my problem.

The problem I have is this:

There will be various user levels on this system, and users of the system may actually be using their own machine as part of the cluster - however, due to this system having a hierarchy (admins, non-admins, etc) - there has to be security implemented to stop a non-admin user from tampering with all the data, and indeed viewing all the data that he should not have access to.

Short of encrypting all the data there remains two options:

1. Only allow the user to store data on his machine that he has read access to - then it simply becomes the matter of verifying that the user has not modified the data - which is not that difficult.

2. Allow all data on all user's machines, however encrypt data that the user will not be allowed access to, so although he may store it - he would not be able to use it in any form. This has the disadvantage of losing any relational consistency, as the data would be encrypted and therefore not possible to link with - but it would get round the first option.

Ideally, the first option would be the best. But perhaps I am looking at this from the wrong point of view?