Database Access Control and Privacy

点击翻译按钮获取中文摘要

Access control is the ability to say who can do what operations on what data; e.g., the shipper in an on-line book store can read a customer address but not update it. Access control takes over after user authentication, deciding what that user is allowed to access, read, write and update (e.g. the shipper should not be inserting new inventory). Customers may be allowed to say that their address can be used for shipping but not for advertising; this is what is commonly referred to as data privacy. Shipping and advertising are examples of privacy purposes. Data concerning the company's inventory is controlled by access control. Customer data, on the other hand, is also subject to privacy concerns. Implementing these privacy requirements, and the tools to express what should be private, are aspects which concern Computer Scientists.