Database Access Control for E-Business - A Case Study Santosh Dwivedi, Bernard Menezes, and Ashish Singh   View Paper (PDF)   Return to Applications: Session-II Abstract In a multi-tiered E-Business application, database access control can be implemented in the application tier or in the database tier or in both. We describe the advantages of Application Service Provider-based Supply Chain Management and present a much simplified database schema for this application. Common user queries which provide input to decision making systems relevant to supply chain optimization are listed. Security requirements in the form of database access control rules are then spelled out. We investigate the use and shortcomings of Oracle's Virtual Private Database as a component of a database tier firewall. ©2006 Association for Computing Machinery