>Or really any access control model? The same way you already do? >Database security is at best per-command and per-table, when true app security often needs

>Or really any access control model? The same way you already do? >Database security is at best per-command and per-table, when true app security often needs to be per-row, or even per-column, perhaps depending on data in the other columns of the same row. Stored procedures already solve all the problems you are imagining. Sane people already use them anyways. >As far as business logic, how is an RDBMS going to make sure that your remaining balance on your gift card is higher than that order you just put in? The same way it already does? If your database is not enforcing those rules then you are already doing it very wrong.