security work with DB,but without access