next up previous contents
Next: Definition of the access Up: Access rights for the Previous: Access rights for the   Contents

Method for the insert, update and delete statements

This route is especially for the insert, update, delete statements and can be described by the following steps:

  1. All actions go through the meta_layer where the action is checked for the user
  2. The arguments in the action (table/columns) are matched with the access rights defined for this user,
  3. If the user doesn't have required access rights for the table/columns set the action is aborted, else access the record is checked in the next point.
  4. Algorithm checks if the statements will be executed on the set of data which are allowed for the user. If DML touches the record which is out of user area then the action is cancelled.


Marek Imialek 2006-06-22