Abstract:
Current database systems apply access control mostly on tables and columns.
However, many applications require access control on individual rows in database
tables. Therefore, we have implemented a row-based access control mechanism. In
our model for access control, object groups, in addition to user groups, are used to
reduce the number of access rights to be defined. In this report, we describe the
relational tables storing information for access control and explain how select,
update, delete and insert operations are performed under access control. We
also explain how access rights are managed.