Database Access Control for E-Business – A case study
Santosh Kumar Dwivedi, Bernard L. Menezes, Kanwal Rekhi, Ashish Pratap Singh · 2005
In a multi-tiered E-Business application, database access control can be implemented in the application tier or in the database tier or in both. We describe the advantages of Application Service Provider-based Supply Chain Management and present a much simplified database schema for this application. Common user queries which provide input to decision making systems relevant to supply chain optimization are listed. Security requirements in the form of database access control rules are then spelled out. We investigate the use and shortcomings of Oracle’s Virtual Private Database as a component of a database tier firewall. 1.