When users log on, the system assigns them an access token identifying who they are and to which groups they belong. The ones registered to the host operating system are directly usable by the database. The owner of an object, or someone with administration rights over the object, can grant or revoke many different kinds of access rights to users or groups. Data Authority , which defines the operations that can be done on the contents of the object. Operational used to look at the description of an object and to use the object as determined by the user's data authorities.
Existence allows the deletion of the object and the transfer of ownership.
Alter used to add, clear and initialize members or to add and alter the file's attributes. Management used to specify the security for the object, to move or rename the object and all functions allowed by the Alter authority. Read used to display the contents of the object. Add used to add entries to an object. Update allows changing the entries in the object.