Skip to content

Overview

How DDM Works

DDM sits between clients and the database:

flowchart LR
    App[Application] -->|native protocol| DDM[(DDM SQL Proxy)]
    DDM -->|forwarded query| DB[(Database)]
    DB -->|raw result| DDM
    DDM -->|masked result| App
  1. The client connects to DDM as if it were the database.
  2. DDM forwards the query to the real database.
  3. The result passes back through DDM, which applies masking rules.
  4. The client receives masked data.

Signing In

To access the DDM management interface, open a supported web browser and go to the URL configured during installation.

1. Open the DDM login page.

2. Enter your Username and Password.

3. Click Sign In.

After successful authentication, the DDM management interface is displayed.

The management interface consists of a navigation menu, a workspace, and global controls. The menu items you see depend on the permissions assigned to your user account.

Menu Description
Databases Manage database connections protected by DDM.
Data Sources Configure the JDBC data sources used by DDM.
Quick Assignment Assign user groups, masking groups, and policy groups to databases with a simplified workflow.
Views Review the current relationships between users, databases, masking rules, and policies.
Database User Manage database users and user groups.
Mask Operations Configure masking rules, masking groups, masking methods, and masking configurations.
Policy Operations Create and manage SQL access policies and policy groups.
Assignments Manage relationships between databases, users, masking groups, and policy groups.
Logs Review connection sessions, SQL activity, and audit logs.
Settings Configure discovery integrations, certificates, and system parameters, workflows, and access management.

How the Objects Fit Together

Masking and policies are not assigned to users one by one. Database users are collected in user groups, and user groups are linked to databases, masking groups, and policy groups.

flowchart LR
    DB[Database] --- UG[User Group]
    UG --- U[Database Users]
    UG --- MG[Masking Group]
    UG --- PG[Policy Group]
    MG --- MR[Masking Rules]
    MR --- MM[Masking Method]
    PG --- P[Policies]

A typical setup order is:

1. Define the database connection on Databases and its JDBC connection on Data Sources.

2. Create the database users and user groups.

3. Create masking rules and collect them in masking groups.

4. Create policies and collect them in policy groups.

5. Link them on Quick Assignment or Assignments.