A security policy for multilevel security, RDBMS, is proposed together with a detailed description of the discretionary security, multilevel security and the principle of least privilege.