        15 
  
    

    15.1.  

              
 ,    ,    . 
        , 
   ,        
. -     . 
         ,    
  . 
         ,     . 
      , ,  ,    
 ,        
,        . 
     (   )  
         .   
    -     
      .     
  :       ,   
   . 

    15.2.   

           : 
      ,     (    
   ,    ). 
        (,      
    -  ). 
        (,    , 
  ,    ). 
          (,    
  ,         
 ). 
        (     
 ,        
 ). 
         (,    
          
   ). 
       ,  ,     
   (,       
    ). 
               
,     . 

    394	 IV.   

             
     ,    
   .       " 
",       ,    
     -  ,    
         
 .     : 
              
  (  )     
.  ,        
      .    
  . 
          , ,    
   ,    
   . ,     
         
 .       . 
            ,   
 . 
      ,      
,         
     ,    . 
       ,  ,    
   ,         
 .   ,   : 
    1.          (.. 
   ,      
)     (        
,    ). 
    2.  ,       
      . (  
" "    , 
    .)   
   ,    
 . 
    3.     ,      
  ,       
   , ..   . 
            
   (,   ),     
(        ). 
 ,          
 . 
         ,    
        .  , 
        
      ,     
  .  ,     
            
    .  , ,   
          
(, ,  ). 

     15. 	395 


    15.3.    

      ,    ,     
  ,  ,     
. ,  ,       
        . 
       ,  
      . 
      ,      
  .      
   . 

    CREATE SECURITY RULE SR3 
    /*    SR3 */ 
    GRANT RETRIEVE ( S#, SNAME, CITY ), DELETE 
    /*   ( S#, SNAME, CITY )   */ 
    ON S WHERE S, CITY # 'London' 
    /*      */ 
     Jim,  Fred, Mary 
    /*  : , ,  */ 
    ON ATTEMPTED VIOLATION REJECT ; 
    /* He      */ 

       ,  (  )   
  . 
    1.  (, SR3  "suppliers rule 3" (  3)). 
        .   
, ,         
       . 
    2.     ,     GRANT 
(, RETRIEVE (   )  DELETE). 
    3.  ,     ,    
 ON.         
    . 
    4.     "" (,  
),        
,      . 
    5.      ,   ON ATTEMPTED 
VIOLATION,  ,  ,     
.          
    (,   
-  ).  , ,  
   ,     , 
  .  ,       
   . 
           ( 
      ). 

    CREATE SECURITY RULE  
    GRANT _1__ ON        
           ___ [ ON ATTEMPTED VIOLATION 
 ]   ; 

    : 
    1.          . 
    2.          : 

    RETRIEVE [ (___) ] 
    INSERT 
    UPDATE  [   (___)   J 
    DELETE 
    ALL 

    396  IV.   

      RETRIEVE,  INSERT,  UPDATE  
 DELETE    . (   
  .   RETRIEVE    
 ,       
,       .  , , 
    REFERENCE (),     
    .)     
RETRIEVE   ,       
.  UPDATE     . 
 ALL       
RETRIEVE (  ), INSERT, UPDATE (  )  DELETE. 
    3.        
(  ,        
  ""),      . 
           
 ,    .  , 
        
 . (,      , 
        .  
          
      .     
  ,         .) 
    4.       
,  .        
ALL (   ). 
    5.       . 
  ,       
 .        
   ; ,     
       
.         
      (..   
  ).       
   ,      
    .    
      . 
    ,         
  : 

    DESTROY SECURITY RULE  ; 

    ,          : 

    DESTROY SECURITY RULE SR3 ; 

       ,      
     ,    . 
         ,   
     . 

    1. CREATE SECURITY RULE EX1 
    GRANT RETRIEVE ( S#, SNAME, CITY ) 
    ON S 
    TO Jacques, Anne,  Charley ; 

     Jacques, Anne, Charley   " 
", ,        
    S.  ,  , 
   ,    . 

     15.  397 


    2. CREATE SECURITY ROLE EX2 
    GRANT RETRIEVE, INSERT, OPDATE (SNAME, STATUS), DELETE ON    S WHERE 
S.CITY = 'Paris' TO    Dan, Misha ; 

     Dan  Misha   " ", 
,        
   S.  ,  ,  
  ,    . 
 ,    Dan  Misha   (INSERT)  
 (DELETE)  ,     (UPDATE)  
S#  CITY. 

    3. CREATE SECURITY RULE EX3 
    GRANT RETRIEVE 
    ON    S WHERE EXISTS SP EXISTS P 
    (S.S# = SP.S# AND SP.P# = P.P# AND P.CITY = 'Rome') TO    Giovanni ; 

          :  Giovanni  
   ,    ,  
 ,   . 

    4. CREATE SECURITY RULE 4 
    GRANT RETRIEVE ( S#, SNAME ) ON S WHERE S.STATUS > 50 TO Judy, Paul ; 

     STATUS     ,     
 (Judy  Paul),        
     50. 
    5.   ,  SSQ  ,   
  . (  3     
    .    
 ,       .) 

    CREATE VIEW SSQ AS 
    ( S.St, SUM (SP WHERE SP.S# = S.S#, QTY) AS SQ ) ; 

          Fidel   
    ,    . 

    CREATE SECURITY RULE EX5 
    GRANT RETRIEVE ON    SSQ 
    TO    Fidel ; 

     ,  Fidel     
 SP. ( ,     
     ,     .) 
    6.  ,  SSS  ,    : 

    CREATE VIEW SSS AS 
    (S.S#, S.SNAME) WHERE S.STATUS > 50 ; 
              4: 
    CREATE SECURITY RULE EX6 
    GRANT RETRIEVE 
    ON    SSS 
    TO    Judy, Paul ; 

         ,    4  
Judy  Paul        S,  
        SSS.  , 
  (      )    
  . 

    398	 IV.   


    7. CREATE SECURITY RULE EX7 
    GRANT RETRIEVE, UPDATE (STATUS) 
    ON    S 
    WHERE DAY () IN ('Mon1, 'Tue', 'Wed', 'Thu', 'Fri') 
    AND TIME () > TIME '9:00 am' 
    AND TIME () < TIME '5:00 pm' TO    Purchasing ; 

     ,        
(  DAY    TIME),    .   
 ,       
 Purchasing (,      Purchasing) 
       .     
- ,        
        (    
     ). 
         ,    
  - . 

    DATEQ       =   
    USERQ       =    
    TERMINALQ   =  ,     

             
         OR.  
,     (   
,   )     ,   
      . ,   
R1 ,   Nancy ()    # 
 WEIGHT    ,   R2 ,    
  #  COLOR      ,   
     #, WEIGHT  COLOR   
 ,    #  COLOR    . 
        :  ,   
   ,       
,      . ,   
  ,  ! 

        

     ,      ,  
        
  ,         
.           
       
 . , ,     
,       ,  
         
 ,      .    , 
   ,   ,  . 
           ,  
       
      .1     
     : 

    1          
   (      
 13),       .     
         
    (,  ,   
 !). 

     15. 	399 

     (  ); ,     
; ,  ;     ; 
      ,   
;  ;  . 
       ,   ,     
  ,      
     . 

    15.4.   

             
,       [15.16]  
 INGRES    QUEL.  ,     QUEL  
    ,     
   .    ,  
 U      ,   
,    : 

    DEFINE PERMIT RETRIEVE ON P TO U WHERE P.CITY = "London" 

    ( DEFINE PERMIT    .)  , 
  (/      QUEL: 

    RETRIEVE ( .#, P.WEIGHT ) WHERE P.COLOR = "Red" 

     "" ( PERMIT)    
    U   ,      ,  
 INGRES       : 

    RETRIEVE ( .#, P.WEIGHT ) WHERE P.COLOR = "Red" MJD  P. CITY = "London" 

    ,         
 .  ,     
 "", ..  U     ,  
   ,     
.   ,        
(,  U     ,    
,    ). 
         " "  
 ,    .  , 
        ,  
       .     
  ,      ( 
    ),     , 
   ,       ( 
,    ).    
    ,         
,      SQL,    
          
      (        ). 
         ,     
     .    
  

    400	 IV.   

    ,   U      .  
  ""      
    ,     . , 
       : 
"      ". 
           QUEL    
    DEFINE PERMIT: 

    DEFINE PERMIT	___ 
    ON	 [   (___3)   ] 
    	 
    [ AT	 ] 
    [  FROM	   ] 
    [ ON	   ] 
    [ WHERE	 ] 

     ,  DEFINE PERMIT     CREATE 
SECURITY RULE   ,       
 WHERE  -  (,    
)    .    
,    : 

    DEFINE PERMIT APPEND, RETRIEVE, REPLACE 
    ON	S ( SNAME, CITY) 
    TO	Joe 
    AT	TTA4 
    FROM	9:00 TO 17:30 
    ON	Sat TO Sun 
    WHERE	S.STATUS < 50 
    AND	S.Sff = SP.Pt 
    AND	SP.Ptt = P.P# 
    AND	P. COLOR = "Red" 

      APPEND   REPLACE    
INSERT   UPDATE . 
          INGRES   
 (, , 1, 2  ..).    
      (    
   HELP,      
    RETRIEVE  QUEL).  
         
 . ,   27   
       : 

    DESTROY PERMIT S 27 


    15.5.    

           ,  
       , , 
,    .   , 
    ,       
 , : ,  ,   
  ..,          
,     . ,    
   , :   > 
 >     ..      
      . 
    1.   /     ,     
      / 
    2.   /   ,     
    / 

     15. 	401 

     1  ,   2   
.    ,  -   
  :  ,   /, 
  ,    /.  
 , ,  ,     
,      "",    
  ,     . 
            
 .   ,     
  (U.S. Department of Defense  DoD)      
      . 
          
   .      
     ,   
 ""  (Orange Book) [15.1]  ""  
(Lavender Book) [15.2].  ""      
   "  " (Trusted Computing Base 
 ),   ""        
  . 
      [15.1, 15.2]       
       ,  
      .      
    (security classes)  D, ,   . 
   D  ,     ,   
D,  .. ,   D   ,    
,    ,      . 
        .       1  2 ( 
 1  ,   2),   
     ,    
     (  ,    
    ). 
        1     
, ..         
       . 
        2    
      ,    . 
        .       
        1, 2   ( 
1  ,      ). 
        1   " " 
( ,           
, : ,     ..),   
     . 
        2    
     ,   
       . ( 
       [15.6].) 
            
    ,     
 . 
        .        
     ,   
        
 (!). 

    402	 IV.   

            
  1,        
 2. 
    . ,      , 
      [15.12, 15.15],   
  [15.17]. 

    15.6.   

    .          
      [15.4]. 
          ,    
          
 ,   .    ,  
      ,  , .. 
         
.         
 , ..        
 . 
            
  .  ()   
 .        
.          
   ,         
,    .    
    ,   ,   , 
      .   , 
  ,     ,    
     . 
    .        : 

    AS KINGFISHERS CATCH FIRE 

    (    ,      
   .)  , ,    
  

    ELIOT 

        . 
    1.      ,      : 
    AS+KI NGFIS HERS+ CATCH +FIRE 
    (    "+"). 
    2.           
00-26,     00,     01, ...,  Z   
26.      
    0119001109 1407060919 0805181900 0301200308 0006091805 
    3.    2    
    0512091520 
    4.            
(   2)     
    (   3),   
            27: 
    0119001109	1407060919	0805181900 0301200308	0006091805 
    0512091520	0512091520	0512091520 0512091520	0512091520 
    0604092602	1919152412	1317000720 0813021801	0518180625 

     15. 	403 

    5.         4  
 : 

    FDIZB SSOXL MQ+GT HMBRA ERRFY 

      ,         
  . (.     
  .)    ,   
    ,    
 .      " "  
,              
.       ,  , 
   ,        
. (        
 : ..      
        .) 
       ,     
,           
,      , ,   
  . 

       

           : 
    ,  ,   
        
.          
,      ,   
       .  
         ,    
        . 
         
 (Data Encryption Standard DES),       
    1977  [15.3]. 
             64   
     64-  (   
   56    8  ,      
 264,   256  .)      
,        
  16   ,  ,     
  ,  ,     
  .   /-   
     ,   Ki,  
      /.      
 [15.3]. 
       ,    
     ,   Ki   
 . 

         

         ,    
            
     ,  
         " ", 
 -  .   ,     
      ,   
        
.          


    404	 IV,   

    ,    ,      
   .       ( 
     :   ,  
 ).  ,         
 ,  ,    ,  
     . 
            
 (Diffie and Hellman) [15.7],      
   ,  ,    (Rivest, 
Shamir, Adleman) [15.14].    ,     
  RSA-,     . 
    1.    ,     . 
    2.          
(.. ,    )   . 
     [15.10]  ,    ,    
  130   ,  7    
 ,     (   )   
 ,     ,   63 
,   40   (1  = 1 000 000 000 000 000). 
    RSA-     . 
    1.            q,  
    r=p*q. 
    2.       ,    
     (-\) * (<71),     . 
    .     : ,    
  ,   /?  q. 
    3.        d,   
"  "     (-1) * (<?-!), ..  
,     
    d *  = 1 modulo  ( - 1)   *   ( - 1). 
      d    ,   q    
   [15.14]. 
    4.           ,   d. 
    5.        (   
   ,  /)     
  
     = f modulo r. 
    6.           
   
     = Cd modulo r. 
     [15.14]    , ..  
      d    
  . ,   ,  d   
    (    q}  .    
   ,      
 (  d)    . 
             
,          . 
    .   = 3, q = 5,   = 15,   ( 1) * (q-\)  
8.   = 11 ( , /?  q).  d   

     15. 	405 

    d * 11 = 1 modulo 8,  d=3. 
     ,         13,  
      : 
     = F modulo r = 1311 modulo 15 = 1,792,160,394,037 modulo 15 = 7 
               : 
     = Cd modulo r = 73 modulo 15 = 343 modulo 15 = 13 
        d  ,       
    "" ,    
  ,       ,   
 (..  ""    ). ,  
             
  .        
 (        ), 
          . ,  
         ,   
     .  ,    
    ,        ,   . 
     ,        
   .    ()    
 ,         
  ,        
   : 
     =    (    (    )   ). 
             
 ,          
   : 
     (  (  ) ) 
    =  (  (  (  (  ) ) ) ) 
    =  (  (  ) )          
    = 	         
     ,   ,     
    ,     
    ,      
   .  ,   ,  
    . 

    15.7.       SQL 

        SQL    
  .        
  SQL.      , 
 (  )        
   .    
         
    ,     
   .     SQL   . 

    406	 IV.   


       

          
     SQL  1-5,    
 15.3. 

    1. CREATE VIEW EX1 AS SELECT S.S#, S.SNAME, S.CITY FRCM S ; 

        ,    
 .        
 GRANT: 

    GRANT SELECT ON 1 Jacques, Anne, Charley ; 

             SQL  
 ,    15.3.   
     GRANT,     CREATE RULE, 
   SQL   . (    SQL 
 , ,   .   
   16.) 

    2. CREATE VIEW EX2 AS 
    SELECT S.S#, S.SNAME, S.STATUS, S.CITY 
    FRCM  S 
    WHERE S.CITY = 'Paris' ; 

           
 GRANT: 

    GRANT SELECT, INSERT, UPDATE ( SNAME, STATUS ), DELETE  2 TO Dan, Misha ; 

    3. CREATE VIEW EX3 AS 
    SELECT S.S#, S.SNAME, S.STATUS, S.CITY FROM  S WHERE EXISTS 
    ( SELECT * FRCM SP WHERE EXISTS 
    ( SELECT * FROM P WHERE S.S# = SP.Stt AND   SP.P# = P.P# AND   P.CITY = 
'Rome') ) ; 

           
  GRANT: 

    GRANT SELECT ON EX3 TO Giovanni  ; 

    4.    CREATE VIEW EX4  AS 
    SELECT  S.S#,   S.SNAME 
    FROM       S 
    WHERE     S.STATUS  >  50   ; 

           GRANT: 

    GRANT SELECT ON EX4 TO Judy, Paul ; 
    5. CREATE VIEW SSQ AS 
    SELECT S.S#, ( SELECT SUM (SP.OTY) 
    FRCM SP 
    WHERE SP.Stt = S.S#   )   AS SQ FRCM S  ; 

           GRANT: 

    GRANT SELECT ON SSQ TO Fidel ; 

        ,    SQL  
  ""    ("" 
,           
   ).    ,   
  (    )   
         
,     .   ,    
       , 
      

     15. 	407 

              
     . ,    
,         
  ,         
  (,    ). 

     GRANT  REVOKE 

       SQL     
     ,       
  .        
 ,      
        .   (  
 )     GRANT. 
     ,      
      . ,  
     (SELECT),  (INSERT), 
 (UPDATE),  (DELETE)   (REFERENCES)    
(    ).  ,    
   "  ", ..    
 -  . 
        GRANT: 
    GRANT _11__ ON   
___ ( WITH GRANT OPTION ]   ; 
    : 
             
(USAGE),  (SELECT),  (INSERT),  (UPDATE),  
(DELETE)   (REFERENCES).  USAGE    
   ,  REFERENCES   
       .  
  .   ,    
(INSERT)   (UPDATE) (    (SELECT),   
)      . 
             : 

    DOMAIN domain [ TABLE ] table 

            ,    
SQL,    TABLE    ,    . 
        ,  ,    
  PUBLIC,    ,  . 
          WITH GRANT OPTION,  ,   
        
 . ,   , ,     
       . , 
 WITH GRANT OPTION   ,   , 
  GRANT,   . 
            
,          .  
     REVOKE    . 
    REVOKE  [ GRANT OPTION TOR ] _1_?_ ON  
FROM ___ ; 

    408	 IV.   

      GRANT OPTION FOR ,    
,  ()  ;   
     ,     GRANT,   
    RESTRICT,  CASCADE.   
    . 
    1. REVOKE SELECT ON EX1 FROM Jacques, , Charley RESTRICT ; 
    2. REVOKE SELECT, INSERT, UPDATE (SNAME, STATUS), DELETE ON EX2 FROM Dan, 
Misha CASCADE ; 
    3. REVOKE SELECT ON EX3 FRCM Giovanni RESTRICT ; 
    4. REVOKE SELECT ON EX4 FRCM Judy, Paul CASCADE ; 
    5. REVOKE SELECT ON SSQ FROM Fidel RESTRICT ; 
     RESTRICT  CASCADE. ,     
          , 
,   ,    .  ,  
        ?    
,        "",  
       ,     
.    RESTRICT  CASCADE   
     .  
  RESTRICT      
,       .  
CASCADE      ,   . 
    ,   , ,    
           
   . 

    15.8.  

     '        
.          
. ,   ,   
    ,     
  .  ,     
  ,   . 
        ,  
     ,   
 .    ,   
      .    
     ,   
(RETRIEVE, UPDATE  ..),  (  ,    
 ,      ),  
       (   
  REJECT).       
    ,     
 , - .   
       
    .    
           
 ,       INGRES   
 QUEL. 
         ,  
         
  .       , 
     , 
    [15.1, 15.2]. 

     15. 	409 

              
,         
       .  , 
    RSA-    .  , 
     . 
          ,   
   SQL,       
,     GRANT  REVOKE   , 
  ,       (, 
, ). 
     , ,  ,      
      ,    . 
,   DB2  IBM      
,          DB2  
    MVS    VSAM (  , 
,       ,   DB2  
    VSAM).   DB2    
    ,  MVS  VSAM,   
   .      
    ,      . 

     

    15.1.   STATS   : 
    STATS (USERID, SEX, DEPENDENTS, JOB, SALARY, TAX, AUDITS) PRIMARY KEY (OSERID) 
      ,    15.3,  
     : 
    )  Ford     ; 
    )     Smith                     
  ; 
    )        
 ; 
    )  Nash       
   SALARY  TAX; 
    )  Todd      USERID, 
SALARY  TAX; 
    )  Ward     ,   
 Todd,       SALARY  TAX; 
    )  Pope      (,  , 
  )     ; 
    )  Jones      , 
   , .. ,     
10 ; 
    )  King        
     . 
    15.2. ,      CREATE 
SECURITY RULE       ,   
(CREATE BASE RELATION)     (DESTROY BASE RELATION), 
 (CREATE VIEW)    (DESTROY VIEW),  
(CREATE SECURITY RULE)     (DESTROY SECURITY RULE) 
 .. 

    410	 IV.   

    15.3.     ,   , 
 ,          AS 
KINGFISHERS CATCH FIRE,     5-  . 
    FNWAL JPVJC FPEXE ABWNE AYEIP SUSVD 
    15.4.  RSA-        = 7, q 
= 5   = 17     = 3. 
    15.5.       ? 
    15.6.   SQL,    . 15.1. 
    15.7.   SQL   ,    
  . 

      

            [15.9],  
        [15.5].  
      , ,  
  -      
 . 
    15.1. U.S. Department of Defense. Trusted Computer System Evaluation 
Criteria ("" ).  DoD National Computer Security Center, 1985. 
    15.2. U.S. Department of Defense. Trusted Database Management System 
Interpretation ("" ).  DoD National Computer Security Center, 1991. 
    15.3. U.S. Department of Commerce/National Bureau of Standards. Data 
Encryption Standard.  Federal Information Processing Standards Publication 
46, 1977.         
(Data Encryption Standard  DES),     
,    .   /  
  ,   .      
      .  
      . 
    15.4. Date. C.J. Security // . J. Date. An Introduction to Database 
Systems: Volume II. Reading. Mass.: Addison-Wesley, 1983. 
    15.5. Denning D.E. Cryptography and Data Security.  Reading, Mass.: 
Addison-Wesley, 1983. 
    15.6. Denning D.E., Denning P.J. Data Security // ACM . Surv.  1979. 
 11,  3. 
      ,      
       (  
   ),     
  (      ). 
         
 .    (   ) 
  ,        
  (,    ),    
    . ,     
 "   ?"  ,   
"    ?"  . 
           ,      
      .   
     . 

     15. 	411 

    1.        25  30 , 
          
    ? 
    2.         25  30 , 
          
    ? 
               
 ( )  " 1",      
 (         
).         [15.4]. 
    15.7. Diffe W., Hellman M.E. New Directions in Cryptography // IEEE Trans. 
on Information Theory.  1976.  IT-22. 
             
    .     ,   
 ,      DES [15.3],  
   .     , , 
   :   ,   . 
      ,      
 . ,       
 ,  ,  ,     
(   ). 
    15.8. Fagin R. On an Authorization Mechanism // ACM TODS.  1978.  3,  3. 
        [15.11]   ,  
   ,      , 
  [15.11]. 
    15.9. Fernandez E.B., Summers R.C., Wood . Database Security and 
Integrity. Reading, Mass.: Addison-Wesley, 1981. 
    15.10. Gardner M. A New Kind of Cipher That Would Take Millions of Years 
to Break // Scientific American.  1977.  237,  2. 
    15.11. Griffiths P.P., Wade B.W. An Authorization Mechanism for a 
Relational Data Base System //ACM TODS.  1976.  1,  3. 
       (GRANT)   (REVOKE) , 
    System R.      
       SQL. 
    15.12. Jajodia S., Sandhu R. Toward a Multilevel Secure Relational Data 
Model // Proc. 1991 ACM SIGMOD Intern. Conf. on Management of Data.  Denver, 
Col., 1991. 
        , " "   
    ,     
  .      ,   
        , 
        .  
,         
  .     ,   
   . , ,   
        
(,     20).     
      S,  
   ,        
  .   ,      
        ,   
   ,      . 

    412	 IV.   

    15.13. Lempel A. Cryptology in Transition // ACM . Surv.  1979. 11, 
4 (Special Issue on Cryptology). 
              . 
    15.14. Rivest R.L., Shamir A., Adleman L. A Method for Obtaining Digital 
Signatures and Public-Key Cryptosystems // CACM.  1978. 21,  3. 
    15.15. Smith K., Winslett M. Entity Modeling in the MLS Relational Model 
// Proc. 18th Intern. Conf. on Very Large Data Bases.  Vancouver, Can., 1992. 
     MLS     " " 
("multilevel secure"  MLS).         
        (BELIEVED BY)  
          
  ,    " [  
]"  .    ,  
     ,   
  . 
    15.16. Stonebraker M.R., Wong E. Access Control in a Relational Data Base 
Management System by Query Modification // Proc. ACM National Conference.  1974. 
              
INGRES (   "query modification"). 
    15.17. Thuraisingham .  Current Status of R&D in Trusted Database 
Management Systems // ACM SIGMOD.  1992. 21,  3. 
             ""  
 . 

        

    15.1. a) CREATE SECURITY RULE  
    GRANT RETRIEVE ON STATS TO Ford ; 
    6) CREATE SECURITY RULE BBB 
    GRANT INSERT, DELETE ON STATS TO Smith ; 
    B) CREATE SECURITY RULE CCC GRANT   RETRIEVE 
    ON      STATS WHERE STATS.USERID = USER {) TO      ALL ; 
             USER. 
    ) CREATE SECURITY RULE ODD 
    GRANT   RETRIEVE, UPDATE ( SALARY, TAX ) ON      STATS TO     Nash ; 
    ) CREATE SECURITY RULE EEE 
    GRANT   RETRIEVE ( USERID, SALARY, TAX ) ON      STATS TO     Todd ; 
    ) CREATE SECURITY RULE FFF 
    GRANT   RETRIEVE ( USERID, SALARY, TAX ) , 
    UPDATE ( SALARY, TAX ) ON      STATS TO     Ward ; 
    ) CREATE SECURITY RULE, GGG GRANT   AIL 
    ON     STATS WHERE STATS.JOB = '1 TO     Pope ; 

     15. 	413 

    3) RANGE OF TX IS STATS ; CREATE SECURITY RULE HHH GRANT   DELETE ON      
STATS WHERE 
    COUNT ( TX WHERE TX.JOB = STATS.JOB ) > 10 TO     Jones ; 
    ) CREATE VIEW SALS AS ( STATS.JOB, 
    MAX ( TX.SAL WHERE TX.JOB = STATS.JOB ) AS MAXSAL, MIN (TX.SAL WHERE 
TX.JOB = STATS. JOB ) AS MINSAL ) ; CREATE SECURITY RULE III 
    GRANT RETRIEVE ON SALS TO King ; 
     ,        
 . 
    15.2.   ,  ,   
         
,       . 
         
    ,     RETRIEVE, 
INSERT, UPDATE  DELETE,         
   . 
    15.3.     : 
    EYES I DARE NOT MEET IN DREAMS 
        ? 
    15.5.    ,   ,    
,         
(,     ).    
           
           
.  ,    ,   
         . 
    15.6. a) GRANT SELECT ON STATS TO Ford ; 
    6) GRANT INSERT, DELETE ON STATS TO Smith ; 
    B) CREATE	VIEW                  MINE                  AS SELECT  STATS. * 
FROM    STATS 
    WHERE   STATS. USER! D	=             USER GRANT SELECT ON MINE TO PUBLIC ; 
     ,    SQL    USER. 
    ) GRANT SELECT, UPDATE ( SALARY, TAX ) ON STATS TO Nash ; 
    ) CREATE VIEW UST AS 
    SELECT  STATS.USERID, STATS.SALARY, STATS.TAX FROM    STATS ; GRANT SELECT 
    ON UST TO Todd ; 
    e) GRANT SELECT, UPDATE { SALARY, TAX ) ON UST TO Ward ; 
    ) CREATE VIEW PREACHERS AS SELECT STATS.* FROM STATS 
    WHERE   STATS.JOB = '' ; GRANT ALL PRIVILEGES ON PREACHERS TO 
Pope ; 
            ALL 
PRIVILEGES ( ). ( ALL PRIVILEGES    

    414	 IV.   

     ,        ,  
         GRANT.) 
    3) CREATE VIEW SPECIALISTS AS SELECT   STX.* FROM      STATS AS STX WHERE 
( SELECT COUNT(*) 
    FROM    STATS AS STY 
    WHERE   STY.JOB = STX.JOB ) > 10 ; 
    GRANT DELETE ON SPECIALISTS TO Jones ; 
    ) CREATE VIEW SALS AS 
    SELECT STATS.JOB, 
    MAX ( STATS.SALARY ) AS MAXSAL, MIN ( STATS.SALARY ) AS MINSAL FROM   
STATS GROUP  BY STATS.JOB ; GRANT SELECT ON SALS TO King ; 
    15.7. a) REVOKE SELECT ON STATS FROM Ford RESTRICT ; 
    6) REVOKE INSERT, DELETE ON STATS FRCM Smith RESTRICT ; B) REVOKE SELECT 
ON MINE FRCM PUBLIC RESTRICT ; 
    ) REVOKE SELECT, UPDATE ( SALARY, TAX ) 
    ON STATS FRCM Nash RESTRICT ; 
    ) REVOKE SELECT ON UST FRCM Todd RESTRICT ; 
    e) REVOKE SELECT, UPDATE ( SALARY, TAX ) 
    ON UST FRCM Ward RESTRICT ; 
    ) REVOKE ALL PRIVILEGES ON PREACHERS FRCM Pope RESTRICT ; 3) REVOKE 
DELETE ON SPECIALISTS FRCM Jones RESTRICT ; ) REVOKE SELECT ON SALS FRCM King 
RESTRICT ; 

     15. 	415 

