Summary

In summary, understanding the basics of security and being aware of security issues contributes to an effective authentication/authorization policy. Furthermore, the precision of your permissions setting will yield a better security and permissions policy. It is important to remember that user access should be based on what they need in order to accomplish their jobs. In other words, a user's access rights should be restricted before allowing the user to access a database. It is bad practice to grant all access to a user, and then later restrict the access rights. By granting all access, you are weakening your security policy and promoting damage to the database.