You would be able to query and INSERT but not DELETE and UPDATE. This is useful for example in banking applications that keep an audit trail for example. A sy

You would be able to query and INSERT but not DELETE and UPDATE. This is useful for example in banking applications that keep an audit trail for example. A sysadmin would not be able to update or delete items in the audit table and so can't cover up a crime. If the database is tampered with at the file level, they have a way to detect that. (Probably some kind of merkle tree.)