This paper presents a methodology for the stepwise specification of dynamic database behavior. A conceptual schema is described in three levels: data, objects and transactions to determine which sequences of database states are admissible integrity constraints on objects are given in temporal logic transactions are specified by pre/post conditions to produce executable state sequences in order to guarantee that executable state sequences already become admissible integrity constraints are completely transformed into additional pre/postconditions we introduce general rules for these transformations thus schema specifications can be refined and simplified systematically.