AUMarket is a retail company whose database system uses the discretionary access control to manage its data. Jennifer is the DBA of this database system and also the owner of a table called PAYMENT. Jennifer grants SELECT on the table PAYMENT to the database user Lee as follows: GRANT SELECT ON PAYMENT TO Lee; However, Jennifer does not want to grant any privileges on the table PAYMENT to the database user Paul. Paul knows very well about database hacking techniques. If Paul does not have any privilege on PAYMENT but he knows that Lee has the SELECT privilege on PAYMENT, is it possible that Paul can hack the database in order to obtain the information of all records in the table PAYMENT? If impossible, you need to explain why it is impossible. If possible, you need to explain how Paul can obtain the information.
please answer DBMS ques asap!
AUMarket is a retail company whose
GRANT SELECT ON PAYMENT TO Lee;
However, Jennifer does not want to grant any privileges on the table PAYMENT to the database user Paul. Paul knows very well about database hacking techniques. If Paul does not have any privilege on PAYMENT but he knows that Lee has the SELECT privilege on PAYMENT, is it possible that Paul can hack the database in order to obtain the information of all records in the table PAYMENT? If impossible, you need to explain why it is impossible. If possible, you need to explain how Paul can obtain the information.
Step by step
Solved in 2 steps with 1 images