Role-Based Access Control (RBAC) in GenosDB

GenosDB integrates a robust Role-Based Access Control (RBAC) module designed to secure peer-to-peer distributed graph databases through cryptographically verifiable user identities and permissions.

Key Concepts: • Identity Management: Users are identified by their Ethereum addresses. Authentication supports WebAuthn (biometric or hardware key protection) and mnemonic phrase recovery. Private keys are securely managed to sign database operations. • Role Hierarchy and Permissions: Roles such as guest, user, admin, and superadmin define granular permissions (e.g., read, write, assignRole). Roles and assignments are stored within GenosDB itself as part of the synchronized distributed state. • Superadmins: One or more Ethereum addresses can be configured as superadmins with elevated privileges, including exclusive rights to assign roles to other users. • Secure P2P Operations: Every outgoing database operation is cryptographically signed by the active user’s private key. Incoming operations from peers are verified for valid signatures and checked against the user’s assigned permissions before acceptance. • Encrypted Local Data Storage: Data tied to users is compressed and encrypted using keys derived from their Ethereum identities, ensuring privacy even in distributed environments.

Operational Flow: 1. Initialization: RBAC is activated on a GenosDB instance by initializing a security context and optionally defining superadmin