Clearly, an additional security approach is required to remove such loopholes, and this requirement is met in an approach called Mandatory Access Control (MAC), which we discuss in detail below. Although discretionary access control is typically provided by most commercial DBMSs, only some also provide support for mandatory access control.