Application Access Control Flashcards
3 levels of security before an end user can CRUD
User Auth/Login, App and modules access, database access
3 security modules
All>System Properties>Security, All>System Security>ACL or High Security Settings
access control may be set at the…
row-level and/or column-level
what are automatically created when a table is created
create, delete, read, and write acls and an associated role
3 things each acl specifies
operation, object, permissions
what are the three permissions in an acl
roles, conditional expressions, scripts
which acl rule type applies to the whole table including all of its records
table.-None-
which acl rule type applies to only one field on a record
table.field
which acl rule type applies to every field on a record without a table.field rule?
wildcard (table.*)
record acl rules are processed in what order
match the object against table ACL rules, most specific to most general, then field ACL rules, most specific to most general
true or false: failing any one permission check prevents the user from accessing the matching object and operation
true