服用标签上的剂量很安全，但大量服用就可能有很大风险。
Drugs that are safe in the dosage stated on the label may be very dangerous in large doses.
一共有三种类型的安全标签组件：数组、集合和树。
There are three types of security label components: arrays, sets, and trees.
安全标签是按组件逐一比较的。
安全标签组件是一个新的数据库实体，可以被创建、删除和修改。
A security label component is a new database entity that can be created, dropped, and altered.
树安全标签组件：树是一个元素集合，用于表示有多个节点和分支的复杂层次关系。
Tree security label component: a tree is a collection of elements representing a complex hierarchy having multiple nodes and branches.
当一个列与一个安全标签相关联时，那个列被称作受保护的列。
When a column is associated with a security label, that column is referred to as a protected column.
数组安全标签组件：数组是一组有序的元素，可用于表示简单的层次结构。
Array security label component: an array is an ordered list of elements that can be used to represent a simple hierarchy.
当一个用户试图访问带标签的数据时，要将他的LBAC凭证与保护数据的安全标签进行比较，以确定是否允许访问。
When a user tries to access labeled data, his LBAC credentials are compared to security label protecting data to see if access is allowed.
豁免权使用户可以访问其安全标签不允许其访问的受保护数据。
An exemption allows a user to access protected data that their security labels might otherwise prevent them from accessing.
如果安全标签没有用于某个组件的值，那么设定该值为空值。
If a security label does not have a value for one of the components, then an empty value is assumed.
DB2LBAC方法是允许用户定义一组组件，以构成一个安全标签，并允许用户指定访问规则。
The DB2 LBAC approach is to allow users to define the set of components that make up a security label and to specify the access rules.
当一个用户试图访问受保护的数据时，必须将他的安全标签与保护数据的安全标签进行比较。
When a user tries to access protected data, his security label is compared to the security label that is protecting the data.
安全标签和豁免权统称为 LBAC凭证。
Together, the security labels and exemptions are called LBAC credentials.
豁免权使原本安全标签权限不足的用户可以访问受保护数据。
An exemption allows users access to protected data that the user's security labels might have otherwise prevented from accessing.
IDSLBACREADSET：要访问数据，用户安全标签的每个集合组件必须包括数据安全标签的集合组件。
IDSLBACREADSET: Each set component of the user security label must include the set component of the data security label to allow access to data.
IDSLBACWRITESET：要访问数据，用户安全标签的每个集合组件必须包括数据安全标签的集合组件。
IDSLBACWRITESET: Each set component of the user security label must include the set component of the data security label to allow access to data.
该函数在选择操作中检索行安全标签列。
This function is used in select operations to retrieve the row security label column.
可以通过更新行，为idssecuirtylabel类型的列指定新的安全标签，从而修改行安全标签。
Row security labels can be modified by updating the row and specifying new security label for the IDSSECUIRTYLABEL type column.
甚至在纽约，伦敦，里约热内卢就有一个新的道路安全“标签”地标。
A new road-safety “tag” even graced landmarks in New York, London and Rio de Janeiro.
安全标签组件是用于安全策略和安全标签的构建块。
Security label components are the building blocks for security policies and labels.
SECLABEL_BY_COMP：该函数通过指定一个安全策略，并在标签中为每个组件指定值，从而构建一个安全标签(内部编码表示)。
SECLABEL_BY_COMP: This function builds a security label (internal encoded representation) by specifying a security policy and values for each of the components in the label.
当用户试图读带安全标签的数据时，则应用读访问规则。
Read access rules are applied when a user attempts to read labeled data.
数据库安全管理员通过向用户授予安全标签来允许他们访问受保护的数据。
The database security administrator allows users access to protected data by granting them security labels.
当一个用户试图访问受保护的数据时，该用户的安全标签将与用于保护该数据的安全标签相比较。
When a user tries to access protected data, that user's security label is compared to the security label protecting the data.
在定义了安全标签组件后，用户就可以定义安全标签，并将安全标签与一个用户或一个(或多个)安全行相关联。
Once a user has defined the security label components, the user can then define the security labels and associate that security label to a user or to a security row (s).
安全管理员通过为用户授予安全标签来允许用户访问受保护的数据。
The security administrator allows users access to protected data by granting them security labels.
用户的LBAC凭证是他所持有的安全标签和豁免权。
A user's LBAC credentials are any security labels he holds plus any exemptions that he holds.
IDSLBACREADARRAY：要访问数据，用户安全标签的每个数组组件必须大于或等于数据安全标签的数组组件。
IDSLBACREADARRAY: Each array component of the user security label must be greater than or equal to the array component of the data security label to allow access to data.
IDSLBACWRITEARRAY：要访问数据，用户安全标签的每个数组组件必须等于数据安全标签的数组组件。
IDSLBACWRITEARRAY: Each array component of the user security label must be equal to the array component of the data security label to allow access to data.
安全策略定义安全标签的组成，并指定控制敏感数据的访问的规则。
Security policy defines the composition of the security labels and specifies the rules used to control access to sensitive data.
应用推荐