We are aware that we can control the method of access by users though our application, but there are other tools they are using in in the company to access the corporate relational database and your database controller must be aware of those tools and implement the same controls on those views of that information within the database.