Why access control protects data in MySQL - Visual Breakdown

Concept Flow - Why access control protects data

User tries to access data

↓

Check user identity

↓

Verify user permissions

↓

Allow access

Access control checks who the user is and what they are allowed to do before letting them see or change data.

Execution Sample

MySQL

GRANT SELECT ON employees TO 'user1';
-- user1 tries to SELECT data
SELECT * FROM employees WHERE id=1;

User1 is given permission to read data from employees table, then tries to read data.

Execution Table

Step	Action	User	Permission Check	Result	Output
1	Grant SELECT on employees	admin	N/A	Permission granted to user1	N/A
2	User1 attempts SELECT * FROM employees WHERE id=1	user1	Has SELECT permission?	Yes	Returns employee data with id=1
3	User2 attempts SELECT * FROM employees WHERE id=1	user2	Has SELECT permission?	No	Access denied error

💡 User without permission is blocked from accessing data

Variable Tracker

Variable	Start	After Step 1	After Step 2	After Step 3
user1_permission	None	SELECT on employees	SELECT on employees	SELECT on employees
user2_permission	None	None	None	None
query_result_user1	None	None	Employee data row	Employee data row
query_result_user2	None	None	None	Access denied

Key Moments - 2 Insights

Why does user2 get an access denied error even though they run the same SELECT query as user1?

Because user2 does not have the SELECT permission granted (see execution_table row 3), so access control blocks their query.

What happens if a user has permission to SELECT but tries to UPDATE data?

Access control checks the requested action against permissions. If UPDATE is not granted, the action is denied even if SELECT is allowed.

Visual Quiz - 3 Questions

Look at the execution_table, what permission does user1 have after step 1?

A UPDATE on employees

B No permissions

C SELECT on employees

D ALL privileges

💡 Hint

Check the 'Permission Check' column in row 1 of execution_table

At which step does user2 get blocked from accessing data?

A Step 3

B Step 2

C Step 1

D User2 is never blocked

💡 Hint

Look at the 'Result' and 'Output' columns for user2 in execution_table

If user1 was not granted any permission, what would happen at step 2?

A User1 would get employee data

B User1 would get access denied error

C User1 could update data

D Query would run without checks

💡 Hint

Refer to how access control blocks users without permission in execution_table row 3

Concept Snapshot

Access control checks user identity and permissions before allowing data access.
Permissions like SELECT, UPDATE control what actions users can do.
Without proper permission, users get access denied errors.
This protects data from unauthorized viewing or changes.
Grant permissions explicitly to users to allow safe access.

Full Transcript

Access control protects data by checking who the user is and what permissions they have before allowing access. For example, if user1 is granted SELECT permission on the employees table, they can read data. If user2 has no permissions, their query is blocked with an access denied error. This ensures only authorized users can view or modify data, keeping it safe from unauthorized access or changes.