| 摘要 |
The present invention concerns data base security in a large data base with a large number of users. In a data base having a large number of users belonging to natural client groupings, a unique system administration role can be established for each client, in addition to the central administration role which gives unrestricted access to the entire data base. A client here representing a single organisation, or department, which has a number of data base users, needs to access only some of the value sets stored on the data base, and to perform only some of the available data base applications. The client administration role has access only to those parts of the data base to which the client group as a whole is permitted access. This role allows a client administrator to control access rights of users belonging to the same client grouping, as well as performing sensitive operations, which might involve loss of data, for the client. The client administrator has no control over his own access rights which are controlled by a central administrator. |
