read class 25 - martinbalke-401-adavanced-js/seattle-javascript-401n14 GitHub Wiki

Role Based Access Control

Role based access control is a system of restricting read / write capabilities on a database to a users role. Roles are given permissions based on their needs and then each user is assigned one or more of these roles. Once a user has the correct role they are able to perform necessary database actions for that role but not for any other role. However a user may be assigned to multiple roles based on their position.

This method of securing a database has quite a few advantages. If an employee leaves the company you do not need to restructure your database access you simply un-assign them from the role they were occupying. This role can then be given to the next employee who is filling their position in a seamless transfer of database capabilities.