Beginning SQL

In Figure 12-3, three different groups are created, and privileges are assigned to the groups. The
Personnel group is given SELECT, INSERT, and UPDATE privileges on tblPersonnel. The Order Entry
group is given SELECT, INSERT, UPDATE, and DELETE privileges on tblOrders, whereas the Shipping
group is given only UPDATE privileges on tblOrders. Once groups are created, user IDs are added to
and deleted from the groups as required. Users belonging to groups inherit the privileges of the group to
which they belong.
Unfortunately, SQL does not directly support groups. Under ANSI/ISO SQL security, you have two
options for handling such needs:
❑ You can assign the same user ID to all the users in the logical group as shown in Figure 12-1.
This simplifies database administration because you can specify privileges once for a large number
of people, but there is no way to determine who is logged in to the database. Furthermore,
you have problems with security when people leave and should no longer have access to the
database. Using this scheme, the only way to handle this is to issue a new password to all the
users of the ID.
Select
Insert
Update
Figure 12-3
Users
Group
Personnel
Belong to
Group
Privileges
TBL Personnel
Select
Insert
Update
Delete
Users
Belong to
Group
Group
Order Entry
Privileges
Update
Fields
SQL Security
Users
Group
Shipping
Belong to
Group
Privileges
333