Stopping traffic: discretionary access control in a multidatabase system

Abstract

Multidatabase systems are designed to integrate heterogeneous database systems under one schema while maintaining site autonomy. Discretionary access control is a method of database security that allows authorized users to give and remove privileges to the data they own. In this paper we translate discretionary access to multidatabases. The SQL2 syntax can be modified to accommodate multiple sites, while maintaining the proper site autonomy. Maintaining a strict local autonomy involves making sure that any changes that are made to a remote site are also made locally. The partial syntax is defined here with future plans for a complete syntax and simulation of the rules in practice.