Controlling Personnel in SQL
Even SQL can’t defend you against bad application design — that’s strictly a live-and-learn proposition. But if you take full advantage of the tools that SQL provides, SQL can protect your data from a lot of problems.
One of the best ways to protect a database from harm is to control which people have access to it:
Some databases will contain sensitive information that should be viewed only by authorized people. Anyone else should not even be able to read the data contained therein.
Some people should be allowed to add new data to a database and others should not. Some should be allowed to change existing data in the database and others should not.
Some people should be able to delete data from the database, while others should not.
Each of these access privileges is separate and distinct. Some people may be granted all of them and other none, with every possible combination in between. With this fine-grained access control, the owner of a database can minimize the chance of destruction, corruption, or misappropriation of data.