Using Granular Access Control - Implementing Database Security and Auditing - page 178

Figure 6.1
Realigning the
database user
model with the
application user
model.
database to let it know the identity of the application user, on behalf of
whom all queries that will follow on this connection are made. This process
is shown in Figure 6.1: 6.1(a) shows the client/server aligned model, 6.1(b)
shows the user model mismatch, and 6.1(c) shows the crux of reestablishing
alignment by sending the application user information to the database.
Communicating the application user on behalf of whom the current
queries are being sent to the database provides many options for both the
database as well as external security layers—options that can elevate your
overall database security level. You will learn several techniques for commu-
nicating the application user to the databases and how to use this additional