Access Control in Databases

The objective of this experiment is to understand how database systems control and restrict access to data using different access control mechanisms.

Specifically, the experiment aims to:

  • Role-Based Access Control (RBAC): To learn how to assign privileges based on user roles in order to simplify privilege management and enforce the principle of least privilege.

  • Discretionary Access Control (DAC): To explore fine-grained access control using GRANT and REVOKE commands and understand how access rights can be flexibly granted and revoked in relational databases.

  • Mandatory Access Control (MAC): To enforce data access restrictions based on classification levels and understand the concept of data classification and policy enforcement.