1

At work, we generate sensitive report files for our clients. Currently, these files are stored in cloud storage. Some partners want the files on their local machine, instead, so we will need the directory in which they want to save the files. Would it be a security risk to save their directory structure in our database?

1
  • Why do you need their directory? Why not a shared folder (so C:\Example\Folder\Folder\REPORTS becomes \\ClientPC\REPORTS where the permissions are locked down)? Or a number of other file copying/distributing techniques?
    – armani
    Apr 9, 2015 at 15:23

1 Answer 1

1

This doesn't jump out at me as a security risk. Sensitive data is stored in databases all the time. If your database is somehow compromised, I suspect that client directory structures getting out would be pretty low on your list of concerns.

2
  • Don't underestimate the power of reputational damage... Apr 10, 2015 at 5:41
  • @LucasKauffman, I would argue that your database being compromised will do the reputational damage - not the fact that you stored directories in there. Apr 10, 2015 at 14:30

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .