B.2 Application-Level Authorization
In Chapter 8, where we covered data control language (DCL), we learned how to handle privileges on the database level, which is a sound and solid approach for authorization management.
However, in many cases, backend applications connect to the database with a single user, which has enough (but still limited) privileges to access all tables related to the application, as shown in Figure B.2.
In such cases, authorization management is not made via distinct database users. Instead, each “application user” has an entry in a custom database table (like member) and their credentials and authorizations are stored in further custom database tables. Authorization management is handled on the application level accordingly ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access