How deeply does Grokking Relational Database Design cover mandatory access control?

Defines classification-based enforcement and illustrates it with student records, but stops short of implementation commands.

Mandatory access control

As explained in Grokking Relational Database Design

Mandatory access control is an access-control model in which a central authority assigns fixed classification-based permissions that users cannot override.

Mandatory access control (MAC) protects confidential database information by enforcing fixed, classification-based permissions. A central authority assigns classifications to data and clearance levels to users; mismatches deny access with no exceptions. section 7.4

High school records database

Label tables as sensitive or confidential, then configure which clearance levels may access each label. A user without the matching clearance cannot view, modify, or delete that data. The sensitivity classifications must be configured manually. section 7.4

Keep these practical rules in mind:

Treat MAC as strict central enforcement rather than user-controlled permission management. section 7.4
Distinguish MAC from role-based access control, which assigns permissions to roles and users to those roles. section 7.4

How Grokking Relational Database Design covers it

Cover of Grokking Relational Database Design

liveBook manning.com

Read Grokking Relational Database Design on liveBook Get the book at manning.com

Related concepts

authorizationkind of · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
authorization modelkind of · An authorization model is a formal scheme that represents authority and determines whether subjects may perform actions on resources.

This explainer was generated by Manning's knowledge graph from the text of Grokking Relational Database Design. The section links point to the parts of the book it draws on.