Slide 1: Title Slide (Group #9)
“Good day, everyone! We are Group 9, and today, we’ll be presenting our topic on Access
Controls—a fundamental aspect of data security.
Slide 2: Introduction to Access Control
To start with, In today’s digital world, protecting sensitive information is more important than ever,
and access control helps organizations safeguard their data. (Read the slide) Access control is a
security mechanism that determines who can access what data and under what conditions. It
ensures that only authorized users can interact with certain data or system resources.
Access control is crucial for:
• Preventing data breaches—Limiting access to sensitive information minimizes the risk of
leaks.
• Ensuring regulatory compliance—Industries like banking and healthcare follow strict
security regulations.
• Maintaining data integrity—Restricting access prevents accidental or malicious
modifications.
A well-implemented access control system ensures that users can only perform actions that align
with their permissions.
Slide 3: User View (Subschema) – Introduction
(Read the first bullet) A user view, also called a subschema, is a customized way of accessing a
database. It defines what a specific user or group of users can see and interact with.
Think of a database as a large library:
A librarian has full access to all books.
A student may only be able to access certain sections.
A visitor might only see a display of book covers without borrowing rights.
Similarly, in a database, different users see different views based on their roles. This is essential for
data security, efficiency, and user-friendliness.
(Read the second bullet) Thus, a user view (subschema) helps structure access control, ensuring
that each user gets the right level of interaction with the database without compromising security.
Each group has a different subschema, ensuring they only access what they need.
Without user views, everyone would have access to everything, leading to security risks,
inefficiency, and privacy violations.
Slide 4: User View (Subschema) – Example & Importance
“Let’s take a practical example of a university database where different people have different
access levels:*
User Role What They Can See (User View / Subschema)
Student Can view their own grades, enrolled subjects, and payment status but cannot see
others’ records.
Professor Can access students’ grades for their subjects but cannot modify payroll details.
Registrar Can update students’ grades and enrollment details but cannot access salaries.
Finance Staff Can process tuition payments but cannot modify academic records.
User views play a crucial role in database management by ensuring that users only access what is
necessary for their role. This is one of the key principles of access control, helping organizations
maintain data security, privacy, and efficiency.
As stated in the slide An important thing to note here is that the user view (or subschema) should
not be changed frequently. It essentially displays record types (entities) and their attributes (data
items), like a student’s name, grades, and ID, but it does not show how these records relate to each
other. The relations between files or different records are kept hidden in this view to maintain
security and data integrity, ensuring users only access relevant information without being exposed
to potentially sensitive relationships between the data.
Slide 5: Database Authorization Table (Example Explanation)
“One of the most common forms of access control is the Database Authorization Table, which
assigns specific privileges to users. (Read the slide)
Let’s look at a real-world scenario:*(pili sa isa)
Bank employees have different levels of access—Tellers can view account balances but cannot
approve loans, while managers have broader access to modify records.
E-commerce websites—Customers can browse products and place orders, but only administrators
can modify product listings or access customer payment details.
Educational institutions—Students can view their grades, but only teachers can update them.
These layers of access control help maintain order and prevent unauthorized changes to critical
data.
Slide 6: User-Defined Procedures
Traditional passwords are not enough (Read the slide) User-defined procedures add an extra layer
of security by requiring users to provide personal information that only they should know.
Examples of user-defined procedures include:
Multi-Factor Authentication (MFA)—Combining a password with a one-time code sent to a mobile
device.
Security Questions—Such as “What was your first pet’s name?”
Behavior-based authentication—Some systems analyze typing speed or login patterns to verify
identity.
This extra security reduces the risk of password-related breaches.
Slide 5: Data Encryption
(Read the slide) the encryption ensures that even if data is stolen, it remains unreadable. It
transforms plain text into a coded format that can only be deciphered with the correct key.
Examples of encryption in daily life:
Online Banking—When you enter your bank details, encryption protects them from hackers.
Messaging Apps—Apps like WhatsApp and Signal use end-to-end encryption to keep conversations
private.
Cloud Storage—Services like Google Drive and Dropbox encrypt files to prevent unauthorized
access.
Encryption is a powerful tool to protect sensitive data from cyber threats.
Slide 6: Biometric Devices (Additional Examples)
(Read the slide) biometric security uses unique physical traits to verify identity.
To explain this further, I’ll hand it over to [Next Presenter’s Name].”
Here are some practical applications
Fingerprint scanners—Used in smartphones, office entry systems, and airport security.
Facial recognition—Implemented in iPhones, surveillance cameras, and passport verification at
airports.
Voice recognition—Used in virtual assistants like Siri and Alexa to recognize users.
Signature recognition—Found in banking applications where digital signatures are required.
Iris recognition—One of the most secure methods, used in high-security areas like government
buildings.
Biometric security is becoming more common due to its accuracy and convenience.
CASE OR SITUATION ABOUT INFERENCE CONTROL ( reporters only )
A hospital that releases anonymized patient data about common illnesses but purposefully rounds
up the number of patients in particular demographics to make it difficult for someone to identify a
specific person based on a particular combination of factors like age, gender, and location within
the data set is an example of situational inference control.
➡ Why is this important?
Data Security – Prevents unauthorized access to sensitive data.
Efficiency – Users only see relevant information, making navigation easier.
Customization – Different departments get access tailored to their needs.
The important thing to be remembered here is that it should not be changed frequently