Database access controls are set by special authorized (by the database owner) personnel that uses dedicated protected security DBMS interfaces.
Who sets database access?
special authorized (by the database owner) personnel