C is corrent because the database administrator ordinarily controls access to the database.
A is incorrect because the controller will not ordinarily control access to the database.
B is incorrect because allowing the systems analyst to determine specific access rights is incompatible with the role of detailed analysis.
D is incorrect because allowing the systems librarian to determine specific access rights is incompatible with the role of serving as librarian over the data.
| 
