Lab 25th August 2009

Through this lab, I can investigate the potential implementation of security mechanism in the database management system and operating system. In these exercises, I was able to define the security issues that are specific to database systems, the problem of protecting information in statistical database. In this lab, I was also examining the potential interactions between security mechanism in the database management system and underlying operating system.

Before I start lab 6.1, I installed the SQL software which get from the shared folder in computer and run it. After finished install, I was fail to create database. So, Mr. Zaki said we must reset the new password in command prmpt. Then, I start to create an accounts database with records which contain CustomerName, Account-Number, Balance, CreditRating. Next, user database with table Customer, Clerk, Manager also created. I was able to define an access structure so that

• Customers can read their own account: The access structure set to read only so customer can only read but could not change the data.

• Clerk can read all fields other than CreditRating and update Balance for all account: The access control is set to user which is read and write only so the clerk read all fields other than CreditRating and update Balance for all account.

• Manager can create new records, read all fields, and update CreaditRating for all accounts: Manager is set the access to administrator so Manager has full control mean that can read and write or modify for all accounts.