Hello,

I need to store the sensitive data in the database and would want to allow
the data retrieval/modification only through the application. So even the
administrator of the DB should NOT be allowed to update the data directly.
Also this restriction will only be applicable to few tables of the database.

Is it doable by granting the restricted permissions?

Else another option would be to store the encrypted data but it would have a
performance hit.

I am planning to use PostgreSQL and Oracle.

Any pointers/suggestions would be much appreciated.

Thanks
Ankur