Database Access Control

java.database_access_control

Severity

low

Resource

Access Control

Language

Java

Description

Avoid database queries except from specific locations.

Restrict database queries to only the specified architecture classes.

This detector flags calls to methods that perform DB queries.

Follow a proper architecture design by ensuring that database queries are restricted to designated architecture classes.

The rule has the following configurable parameters:

dbLocationPatterns, that indicates the list of ANT patterns with the paths of the specific locations that are allowed to hold DB queries. Empty means that nothing is allowed.