> For instance the DBA (database administrator )
> have access to the complete database, which also
> includes your application developers.

*IF* you are working with sensitive data, then the
application developers would only have full access to a
'development' copy of the database. The production database
CAN be so secure that full access is limited properly ( as
Helen said ). I have to ASK to be logged in on one site, the
manager can see what I am getting at, and everybody is happy.
Going on from that, extremely sensitive data should -
perhaps such as personal medical notes - not even be in the
database, but in separate encrypted files with additional
access security. But that is a separate discussion ;)

--
Lester Caine
-----------------------------
L.S.Caine Electronic Services