

The basic use case is as such:
2 databases, 1 encrypted, 1 not
2 separate sets of users, 1 of which acts on the other set of users
Some users from the unencrypted database have access to the encrypted database some do not.
I'm aware that someone getting access to the app side could decrypt the encrypted database if i were to keep the encryption key(s) available.
Its more from application logic security, than low level security, where two sets of users need to keep their data separate, but have access to similar functions and some shared tables.