From: Sean O'Dell <sean@...>
Date: 2004-07-10T04:09:25+09:00
Subject: Re: Secure Database Systems

On Friday 09 July 2004 11:32, Sarah Tanembaum wrote:
>
> Is the control should be in the database or the programming language such
> as Java, Ruby, PHP, ASP, PERL, etc?

I personally usually develop a layer above the database where business logic 
goes, and put user-level authentication there, and give the business logic 
layer full access to the database.  It's simple to encrypt individual fields 
at the business logic layer.

	Sean O'Dell