Why access control protects data in MySQL - Quick Recap

Recall & Review

beginner

What is access control in databases?

Access control is a security method that limits who can see or change data in a database. It helps keep data safe by allowing only authorized users to access it.

beginner

Why is access control important for data protection?

Access control protects data by preventing unauthorized users from viewing or changing sensitive information, reducing the risk of data leaks or damage.

intermediate

Name two common types of access control in databases.

Two common types are: 1) Role-Based Access Control (RBAC), which assigns permissions based on user roles, and 2) Discretionary Access Control (DAC), where owners decide who can access their data.

beginner

How does access control help in real-life situations?

It ensures that only employees with the right permissions can see or edit customer information, protecting privacy and preventing mistakes or fraud.

beginner

What could happen if a database has no access control?

Anyone could see or change data, leading to privacy breaches, data loss, or unauthorized actions that harm the business or users.

What does access control in a database do?

A Speeds up database queries

B Deletes old data automatically

C Limits who can view or change data

D Backs up data regularly

Access control limits who can view or change data to protect it.

Which of these is a type of access control?

A Role-Based Access Control

B Data Compression

C Query Optimization

D Indexing

Role-Based Access Control assigns permissions based on user roles.

What risk does lack of access control create?

A Faster data retrieval

B Unauthorized data access

C More storage space

D Better user interface

Without access control, unauthorized users can access sensitive data.

Who decides access permissions in Discretionary Access Control?

A Database engine

B All users equally

C System administrator only

D Data owners

In DAC, data owners decide who can access their data.

How does access control protect customer privacy?

A By restricting data access to authorized users

B By deleting customer data regularly

C By sharing data with all employees

D By encrypting the database only

Access control restricts data access to authorized users, protecting privacy.

Explain in your own words why access control is important for protecting data in a database.

Think about who should see or change data and why.

Describe two types of access control and how they help protect data.

Consider who decides permissions and how they are assigned.

Practice

1. Why is access control important in a MySQL database?

easy

A. It limits who can view or change data, protecting it from unauthorized access.

B. It speeds up query execution by caching results.

C. It automatically backs up the database daily.

D. It formats the data for better display on websites.

Solution

1. Step 1: Understand the purpose of access control

   Access control restricts database access to authorized users only.

2. Step 2: Identify the benefit of restricting access

   By limiting who can view or modify data, it protects data from unauthorized changes or leaks.

3. Final Answer:

   It limits who can view or change data, protecting it from unauthorized access. -> Option A

4. Quick Check:

   Access control = Protects data [OK]

Hint: Access control means who can do what with data [OK]

Common Mistakes:

• Confusing access control with performance features
• Thinking access control handles backups
• Believing access control formats data display

2. Which MySQL command is used to give a user permission to access a database?

easy

A. SELECT

B. REVOKE

C. GRANT

D. DELETE

Solution

1. Step 1: Recall MySQL commands for permissions

   GRANT is used to give permissions; REVOKE removes them.

2. Step 2: Identify the command that grants access

   GRANT assigns privileges to users to access or modify data.

3. Final Answer:

   GRANT -> Option C

4. Quick Check:

   GRANT = Give permission [OK]

Hint: GRANT gives access, REVOKE removes it [OK]

Common Mistakes:

• Confusing GRANT with REVOKE
• Choosing data manipulation commands like SELECT or DELETE
• Thinking SELECT grants permissions

3. Given the commands:
GRANT SELECT ON employees TO 'user1'@'localhost';
REVOKE INSERT ON employees FROM 'user1'@'localhost';
What can 'user1' do on the employees table?

medium

A. No permissions at all

B. Only select (read) data from employees

C. Both select and insert data

D. Insert new data but cannot read data

Solution

1. Step 1: Analyze the GRANT command

   GRANT SELECT allows user1 to read data from employees table.

2. Step 2: Analyze the REVOKE command

   REVOKE INSERT removes insert permission, so user1 cannot add data.

3. Final Answer:

   Only select (read) data from employees -> Option B

4. Quick Check:

   GRANT SELECT + REVOKE INSERT = Read only [OK]

Hint: GRANT adds, REVOKE removes permissions [OK]

Common Mistakes:

• Assuming REVOKE removes all permissions
• Thinking user1 can insert data
• Confusing SELECT with INSERT permission

4. A database admin runs:
GRANT SELECT ON sales TO 'user2'@'%';
REVOKE SELECT ON sales FROM 'user2'@'%';
But user2 can still read the sales table. What is the likely problem?

medium

A. User2 has SELECT permission from another host or user entry.

B. The REVOKE command syntax is incorrect.

C. MySQL does not support REVOKE for SELECT.

D. User2 needs to restart the database to update permissions.

Solution

1. Step 1: Understand permission scope in MySQL

   Permissions are granted per user and host combination.

2. Step 2: Identify why REVOKE may not work as expected

   If user2 has another entry with SELECT permission from a different host, that permission remains.

3. Final Answer:

   User2 has SELECT permission from another host or user entry. -> Option A

4. Quick Check:

   Multiple user entries can override REVOKE [OK]

Hint: Check all user@host entries for permissions [OK]

Common Mistakes:

• Assuming REVOKE syntax is wrong without checking user entries
• Believing REVOKE is unsupported for SELECT
• Thinking a database restart is needed for permission changes

5. You want to ensure only the HR team can update employee salaries in MySQL. Which approach best protects this sensitive data?

hard

A. Grant all permissions to everyone and rely on application checks.

B. Allow all users to SELECT and UPDATE salaries for transparency.

C. Do not use any access control and trust users to behave.

D. Grant UPDATE permission on salaries table only to HR users, revoke from others.

Solution

1. Step 1: Identify the need for restricted update access

   Only HR should modify salaries to protect sensitive data.

2. Step 2: Apply access control best practice

   Grant UPDATE permission only to HR users and revoke from others to enforce this.

3. Final Answer:

   Grant UPDATE permission on salaries table only to HR users, revoke from others. -> Option D

4. Quick Check:

   Restrict update rights to protect sensitive data [OK]

Hint: Limit update rights to trusted users only [OK]

Common Mistakes:

• Giving update rights to all users
• Relying only on application-level checks
• Ignoring access control for sensitive tables