Concept - Database Access Control Policies
The DBMS provides access control for the database; it assumes an authenticated user and gives specific rights (create, insert, delete, update, read, write) to the entire database, tables, selected rows or columns, possibly depending on the contents of a table entry (s.21).
| Administration policy | Who grants and revokes |
|---|---|
| Centralized | a small number of privileged users |
| Ownership-based | the owner (creator) of a table, for that table |
| Decentralized | the owner, who may also let other users grant and revoke rights on the table |
(s.21)
Connection to the previous deck: the same ideas as Concept - Access Control, but enforced inside the DBMS; the summary (s.38) also mentions role-based control for databases.
Related: Concept - GRANT and REVOKE, Concept - Role-Based Access Control. Appears in 05 Database Security - Chunk 01 (s.1-38).