Does "Database access controls are set by special authorized (by the database owner) personnel that uses dedicated protected security DBMS interfaces." correctly answer the question of Who sets database access?
yes