Health Data Clinic - Book 14: Authentication & Authorization

Two questions guard every table: who are you, and what may you do. This book separates them cleanly. It opens with the CIA triad as the frame, then covers authentication, from single-factor to multi-factor, and what a second factor really changes. Authorization follows, with a direct comparison of the two so the terms stop blurring. Then you build role-based access control: creating users and roles in SQL, granting and withdrawing privileges with GRANT and REVOKE, and applying least privilege so an account carries only the rights its job needs. A chapter explains how SQLite differs, since it has no user accounts of its own, and shows access enforced at the application level with audit triggers recording what was done. Password safety and a closing security checklist round it out, covering what a stored password should look like. This is database engineering, taught as engineering.

Twenty-five A4 pages, in full color. Written in short sentences and plain English, for readers whose first language is not English and clearer for everyone else because of it.

Every query in this book was run against a live database before the page was printed, so the result you read is the result you get. Instant PDF download. By M.R. Sterling.