Best Practicies & Success Stories
We've been designing database systems the same way for the past thirty plus years. The way we've been designing databases needs to change. We'll go through what is wrong with the current model of designing databases, and explore a secure architecture that enforces a trusted path to the data. No longer are we granting access to database objects to users through privileges, we are starting to use code based access control along with the segregation of code and data. This way, an external program written in say java does not directly access the data; it however uses an API into the database. This model also has the advantage of standardizing access to data objects; making tuning and maintenance easier.