Database Access Control and Privacy

访问控制是说谁可以对什么数据执行什么操作的能力；例如，在线书店中的发货人可以读取客户地址，但不能更新它。访问控制在用户身份验证后接管，决定允许该用户访问、读取、写入和更新哪些内容(例如，发货人不应插入新的库存)。客户可能会被允许说，他们的地址可以用于发货，但不能用于广告；这就是通常所说的数据隐私。航运和广告是隐私目的的例子。有关公司库存的数据通过访问控制进行控制。另一方面，客户数据也受到隐私问题的影响。实施这些隐私要求，以及表达什么应该是隐私的工具，都是计算机科学家关心的方面。

Access control is the ability to say who can do what operations on what data; e.g., the shipper in an on-line book store can read a customer address but not update it. Access control takes over after user authentication, deciding what that user is allowed to access, read, write and update (e.g. the shipper should not be inserting new inventory). Customers may be allowed to say that their address can be used for shipping but not for advertising; this is what is commonly referred to as data privacy. Shipping and advertising are examples of privacy purposes. Data concerning the company's inventory is controlled by access control. Customer data, on the other hand, is also subject to privacy concerns. Implementing these privacy requirements, and the tools to express what should be private, are aspects which concern Computer Scientists.