Summary

This chapter covered security barriers and privileges and explored definer and invoker rights models. Security barriers are applied to various situations, from company firewalls, to account authentication, and each barrier should be secured in turn. Privileges exist for system and object components, and the syntax should be carefully examined, because these components are the key barriers to the company’s crown jewels: its data.

The definer rights model is the default design paradigm and best suited to consolidated repositories. It offers options that can create an additional security barrier after database authentication. The invoker rights model lets you share a common code repository while replicating data into separately maintained databases.