You identify the need for a new database table and you want to control access to this database table through a service-layer API.
How do you start?