This standard is analogous to the USA's level B3 data security classification. High data readiness sub-system. User authorization is performed when connecting to the system. It is done via verification of a username and password. If the verification process returns positive results, all subsequent queries to the DBMS through this connection are connected to this user.
Any query attempting to access any database object has to pass data access control.
If necessary, a success or fail entry on the query is made in the security system log. In this case, discretionary and mandatory security criteria are used and a check is performed as to whether or not the current user is permitted to work at the client station in question. This is the person in charge of creating a DB, configuration, user, group, role registration, registration information entries, etc. These are the users who have the right to create custom DB objects and have full control over access privileges to them. Users who perform actions on DB objects constrained by their access privileges.