Chapter 5

1. 1. [False] Authentication establishes the identity of a user while authorization gives the user access to certain functionality or resources.

2. 2. [False] dm_check_password is only used on UNIX.

3. 3. [d] A user can be created in the repository without the existence of the corresponding external account. The external account is needed for authentication to succeed in these cases.

4. 4. [False] The database owner for the repository database is called the repository owner.

5. 5. [False] Client applications may choose to enforce client capabilities. Webtop and Desktop clients do enforce them.

6. 6. [False] Document creation is not controlled by privileges.

7. 7. [False] Create Cabinet and Create Type are separate privileges and each of these needs to be explicitly granted.

8. 8. [True] The Superuser privilege includes all Sysadmin privileges.

9. 9. [False] System Administrator client capability would be needed only if the client application is being used to create the user-enforced client capabilities.

10. 10. [True]