Database access controls are set by special authorized (by the database owner) personnel that uses dedicated protected security DBMS interfaces