HP 3000 Manuals HP 3000 Manuals
Appendix B Authorities Required by ALLBASE/SQL Statements
This appendix lists the authorities required for each ALLBASE/SQL
statement. Note that you do not have to have all of the authorities that
are marked to perform an activity, you only need one of them. For more
information, refer to the "Database Creation and Security" chapter and to
the "DBEnvironment Configuration and Security" chapter. The ALLBASE/SQL
Reference Manual contains complete descriptions of each statement.
Table B-1. Authorities Required By ALLBASE/SQL Statements
--------------------------------------------------------------------------------------------
- Statement - Authority Required -
--------------------------------------------------------------------------------------------
- ADD DBEFILE - DBA -
- ADD TO GROUP - DBA or OWNER -
- ADVANCE - None -
- ALTER DBEFILE - DBA -
- ALTER TABLE - DBA, OWNER, or ALTER -
--------------------------------------------------------------------------------------------
- BEGIN - None -
- BEGIN ARCHIVE - DBA -
- BEGIN DECLARE SECTION - None -
- BEGIN WORK - None -
--------------------------------------------------------------------------------------------
- CHECKPOINT - DBA -
- CLOSE - None -
- COMMIT ARCHIVE - DBA -
- COMMIT WORK - None -
- CONNECT - DBA or CONNECT -
- CREATE DBEFILE - DBA -
- CREATE DBEFILESET - DBA -
- CREATE GROUP - DBA or RESOURCE -
- CREATE INDEX - DBA, OWNER, or INDEX -
- CREATE PARTITION - DBA -
| CREATE PROCEDURE | DBA or RESOURCE (and appropriate authorities on objects |
| | referenced by the procedure) |
| CREATE RULE | OWNER for the table and OWNER or EXECUTE for the |
| | procedure; or DBA |
- CREATE SCHEMA - DBA or RESOURCE -
- CREATE TABLE - DBA or RESOURCE -
- CREATE TEMPSPACE - DBA or RESOURCE -
- CREATE VIEW - DBA, OWNER, or SELECT (on relevant columns) -
--------------------------------------------------------------------------------------------
Table B-1. Authorities Required By ALLBASE/SQL Statements (cont.)
--------------------------------------------------------------------------------------------
- Statement - Authority Required -
--------------------------------------------------------------------------------------------
| DECLARE CURSOR | For a select cursor: DBA, OWNER, or SELECT (on relevant |
| | columns) and UPDATE (for an updatable cursor). For a |
| | procedure cursor: DBA or OWNER or EXECUTE (for the |
| | procedure). |
- DECLARE variable - None -
- DELETE - DBA, OWNER, or DELETE -
- DELETE WHERE CURRENT - DBA, OWNER, or DELETE -
| DESCRIBE | Same as for a SELECT or EXECUTE PROCEDURE that is |
| | described; otherwise, none |
- DISABLE AUDIT LOGGING - DBA -
- DISABLE RULES - DBA -
- DISCONNECT - None -
- DROP DBEFILE - DBA -
- DROP DBEFILESET - DBA -
- DROP GROUP - DBA or OWNER -
- DROP INDEX - DBA, OWNER, or INDEX -
- DROP MODULE - DBA or OWNER -
- DROP PARTITION - DBA -
- DROP PROCEDURE - DBA or OWNER -
- DROP RULE - DBA or OWNER -
- DROP TABLE - DBA or OWNER -
- DROP TEMPSPACE - DBA or OWNER -
- DROP VIEW - DBA or OWNER -
--------------------------------------------------------------------------------------------
- ENABLE AUDIT LOGGING - DBA -
- ENABLE RULES - DBA -
- END DECLARE SECTION - None -
- EXECUTE (Interactive) - DBA, RESOURCE, or OWNER -
- EXECUTE (Programmatic) - Same as for statement being executed -
- EXECUTE IMMEDIATE - Same as for statement being executed -
- EXECUTE PROCEDURE - OWNER or EXECUTE for the procedure; or DBA -
--------------------------------------------------------------------------------------------
- Execute an SQL program - RUN -
--------------------------------------------------------------------------------------------
- FETCH - None -
--------------------------------------------------------------------------------------------
- GENPLAN - Same as for statement being analyzed -
- GOTO - None -
- GRANT (Special) - DBA -
| GRANT (Table, View, RUN, | DBA, OWNER, or user with grantable privilege (on tables |
| EXECUTE) | and views) |
| GRANT WITH GRANT OPTION | Direct DBA, direct OWNER, or user with grantable |
| | privilege |
- GRANT BY - DBA -
- IF - None -
- INCLUDE - None -
- INSERT - DBA, OWNER, or INSERT -
--------------------------------------------------------------------------------------------
Table B-1. Authorities Required By ALLBASE/SQL Statements (cont.)
--------------------------------------------------------------------------------------------
- Statement - Authority Required -
--------------------------------------------------------------------------------------------
- Labeled Statement - None -
- LOCK TABLE - DBA, OWNER, or SELECT -
--------------------------------------------------------------------------------------------
| OPEN | For a select cursor: DBA, OWNER, or SELECT (on relevant |
| | columns) and UPDATE (for an updatable cursor). For a |
| | procedure cursor: DBA or OWNER or EXECUTE (for the |
| | procedure). |
--------------------------------------------------------------------------------------------
- PREPARE - Same as for statement being prepared -
- PRINT - None -
- RAISE ERROR - None -
- REFETCH - None -
- RELEASE - None -
- REMOVE DBEFILE - DBA -
- REMOVE FROM GROUP - DBA or OWNER -
- RESET - DBA -
- RETURN - -
- REVOKE (Special) - DBA -
| REVOKE (Table, View, RUN, | DBA, OWNER, or grantable privilege; only DBA if table or |
| EXECUTE | view and if no CASCADE and chain of grants exists |
- ROLLBACK WORK - None -
--------------------------------------------------------------------------------------------
- SAVEPOINT - None -
- SELECT - DBA, OWNER, or SELECT -
- SET CONNECTION - None -
- SET CONSTRAINTS - None -
- SET DEFAULT DBEFILESET - DBA -
- SET DML ATOMICITY - None -
- SET MULTITRANSACTION - None -
- SETOPT - None -
- SET PRINTRULES - DBA -
- SET SESSION - None -
- SET TRANSACTION - -
- SET USER TIMEOUT - None -
- SQLEXPLAIN - None -
- START DBE - DBA -
- START DBE NEW - DBA -
- START DBE NEWLOG - DBA and DBECreator status -
- STOP DBE - DBA -
--------------------------------------------------------------------------------------------
- TERMINATE USER - DBA -
- TRANSFER OWNERSHIP - DBA or OWNER -
- TRUNCATE TABLE - DBA or OWNER -
--------------------------------------------------------------------------------------------
- UPDATE - DBA, OWNER, or UPDATE -
- UPDATE STATISTICS - DBA or OWNER -
- UPDATE WHERE CURRENT - DBA, OWNER, or UPDATE -
--------------------------------------------------------------------------------------------
Table B-1. Authorities Required By ALLBASE/SQL Statements (cont.)
--------------------------------------------------------------------------------------------
- Statement - Authority Required -
--------------------------------------------------------------------------------------------
- VALIDATE - DBA or OWNER; RUN on module, or EXECUTE on procedure -
--------------------------------------------------------------------------------------------
- WHENEVER - None -
- WHILE - None -
--------------------------------------------------------------------------------------------