Administrative Policies in SQL

Related Concepts

Grant Option; Roles in SQL; SQL Access Control Model

Definition

Administrative policies specify the responsibilities for the definition of the security policy in an organization. They can be considered as meta-policies, describing how users can create the concrete policy that has to be applied over the resources in the system.

Application

Outside of the database scenario, administrative policies are typically supported in a limited way. A common facility in most access control systems is the idea that there is a central overall owner of the system (e.g., administrator, root, supervisor); then, to improve flexibility and let the system better manage the information system requirements, an owner(user, role, group) for every resource is defined. The owner typically corresponds to the security principal responsible for the creation of the resource. The owner, in addition to the central administrator, will have the right to define access privileges to the resorce or to...