I have various database types, Oracle 11g, MySQL 5, Sql Server 2012. I have direct access. I can have other databases if I need them such as PostgreSQL.
What I'm doing is protecting data at the database and table level as opposed to the application level though I there will be some mixing.
What I'm hoping to do is control all the security from Active Directory. I don't want to do security in MySQL, security in Oracle, etc. That is a lot of duplicate entry.
I will have a webpage send credentials to the database engine to determine which bits of data the user can see.
Thanks for ideas.