Access Control:

• Users should be allowed to access only authorized data.
• Different users can be restricted to different modes of access
• MySQL uses the concept of privileges to accomplish this (GRANT/REVOKE)