ITPEC IP April 2023 Question 18

Access rights set for each combination of data and user — each user then sees only the data that its confidentiality and the user's job allow.

The DBMS keeps one shared database and grants each user, or each role, the operations allowed on each table, view or column: read, insert, update, delete. A view can further show a user only certain rows and columns. Confidential data stay hidden from users who do not need them, while everyone works on the same up-to-date data, following the principle of least privilege.

Answer (a)

Why not others:

• •(b) — per-user copies duplicate the data: every update must be repeated in each copy, the copies drift apart, and each one is another thing to lose or leak
• •(c) — columns dedicated to each user change the data structure for every user and repeat the same data, and by themselves stop no one from reading other columns
• •(d) — a password per record is impractical to manage, and anyone given the password sees the record whatever their business need

Key rule: Control who may see what with access rights and views in the DBMS on one database, not by copying or restructuring the data for each user.

Databases · AI-written, may contain errors