APPLICATIONS:

Bora Applications come with a number of accounts and access control privileges. At this point it should be understood that the application accounts have nothing to do with the two system accounts we talked earlier; that is the DBA and the Bora Admin.

Application accounts reside and live inside Bora applications. Even Bora engine itself knows nothing about them; not to mention the underlying operating system. These accounts utilize a couple access control privileges. The following is a list of them, however there is nothing limiting this list; it can be expanded quite easily:

ACL PRIVILEGES:

1. ADMIN: Admin privilege is supposed to be owned only by the application administrator. He/she has read/write access to all the records in the database. This privilege can create other application accounts, and can grant or revoke ACL privileges on those.

   For the database proficient, this admin does not have DDL privileges. In fact, DDL privilege is only owned by the DBA (this is a system user, not an application user), and is not granted to anyone else.

2. EMPLOYEE: This privilege is granted to company employees only. It allows a user to view corporate intranet documents, other employees' public records, company-confidential material, etc.

3. SALES: Sales privilege is supposed to be granted to sales people only. It allows a user to see inventory details, orders, cost basis, change sales or order statuses, etc.

4. PARTNER: Although this privilege does exist, it is not used by the current set of Bora applications.