 |
» |
|
|
|
This appendix lists the authorities required for
each ALLBASE/SQL statement.
Note that you do not have to haveallof the authorities
that are marked to perform an activity, you only need one of
them.
For more information, refer to the "Database Creation and Security"
chapter and to the "DBEnvironment Configuration and Security" chapter.
The ALLBASE/SQL Reference Manual contains complete descriptions of
each statement.
Table B-1 Authorities Required By ALLBASE/SQL Statements | Statement | Authority Required |
|---|
| ADD DBEFILE | DBA | | ADD TO GROUP | DBA or OWNER | | ADVANCE | None | | ALTER DBEFILE | DBA | | ALTER TABLE | DBA, OWNER, or ALTER
| | BEGIN | None | | BEGIN ARCHIVE | DBA | | BEGIN DECLARE SECTION | None | | BEGIN WORK | None
| | CHECKPOINT | DBA | | CLOSE | None | | COMMIT ARCHIVE | DBA | | COMMIT WORK | None | | CONNECT | DBA or CONNECT | | CREATE DBEFILE | DBA | | CREATE DBEFILESET | DBA | | CREATE GROUP | DBA or RESOURCE | | CREATE INDEX | DBA, OWNER, or INDEX | | CREATE PARTITION | DBA | | CREATE PROCEDURE | DBA or RESOURCE (and appropriate authorities on
objects referenced by the procedure) | | CREATE RULE | OWNER for the table and OWNER or EXECUTE for the
procedure; or DBA | | CREATE SCHEMA | DBA or RESOURCE | | CREATE TABLE | DBA or RESOURCE | | CREATE TEMPSPACE | DBA or RESOURCE | | CREATE VIEW | DBA, OWNER, or SELECT (on relevant columns)
| | DECLARE CURSOR |
For a select cursor:
DBA, OWNER, or SELECT (on relevant columns) and
UPDATE (for an updatable cursor).
For a procedure cursor:
DBA or OWNER or EXECUTE (for the procedure). | | DECLARE variable | None | | DELETE | DBA, OWNER, or DELETE | | DELETE WHERE CURRENT | DBA, OWNER, or DELETE | | DESCRIBE | Same as for a SELECT or EXECUTE PROCEDURE that is described;
otherwise, none | | DISABLE AUDIT LOGGING | DBA | | DISABLE RULES | DBA | | DISCONNECT | None | | DROP DBEFILE | DBA | | DROP DBEFILESET | DBA | | DROP GROUP | DBA or OWNER | | DROP INDEX | DBA, OWNER, or INDEX | | DROP MODULE | DBA or OWNER | | DROP PARTITION | DBA | | DROP PROCEDURE | DBA or OWNER | | DROP RULE | DBA or OWNER | | DROP TABLE | DBA or OWNER | | DROP TEMPSPACE | DBA or OWNER | | DROP VIEW | DBA or OWNER
| | ENABLE AUDIT LOGGING | DBA | | ENABLE RULES | DBA | | END DECLARE SECTION | None | | EXECUTE (Interactive) | DBA, RESOURCE, or OWNER | | EXECUTE (Programmatic) | Same as for statement being executed | | EXECUTE IMMEDIATE | Same as for statement being executed | | EXECUTE PROCEDURE | OWNER or EXECUTE for the procedure; or DBA
| | Execute an SQL program | RUN
| | FETCH | None
| | GENPLAN | Same as for statement being analyzed | | GOTO | None | | GRANT (Special) | DBA | | GRANT (Table, View, RUN, EXECUTE) | DBA, OWNER, or user with grantable
privilege (on tables and views) | | GRANT WITH GRANT OPTION | Direct DBA, direct OWNER, or user with
grantable privilege | | GRANT BY | DBA | | IF | None | | INCLUDE | None | | INSERT | DBA, OWNER, or INSERT
| | Labeled Statement | None | | LOCK TABLE | DBA, OWNER, or SELECT
| | OPEN |
For a select cursor:
DBA, OWNER, or SELECT (on relevant columns) and
UPDATE (for an updatable cursor).
For a procedure cursor:
DBA or OWNER or EXECUTE (for the procedure).
| | PREPARE | Same as for statement being prepared | | PRINT | None | | RAISE ERROR | None | | REFETCH | None | | RELEASE | None | | REMOVE DBEFILE | DBA | | REMOVE FROM GROUP | DBA or OWNER | | RESET | DBA | | RETURN | | | REVOKE (Special) | DBA | | REVOKE (Table, View, RUN, EXECUTE | DBA, OWNER, or
grantable privilege; only DBA
if table or view and if no CASCADE and chain of grants exists | | ROLLBACK WORK | None
| | SAVEPOINT | None | | SELECT | DBA, OWNER, or SELECT | | SET CONNECTION | None | | SET CONSTRAINTS | None | | SET DEFAULT DBEFILESET | DBA | | SET DML ATOMICITY | None | | SET MULTITRANSACTION | None | | SETOPT | None | | SET PRINTRULES | DBA | | SET SESSION | None | | SET TRANSACTION | | | SET USER TIMEOUT | None | | SQLEXPLAIN | None | | START DBE | DBA | | START DBE NEW | DBA | | START DBE NEWLOG | DBA and DBECreator status | | STOP DBE | DBA
| | TERMINATE USER | DBA | | TRANSFER OWNERSHIP | DBA or OWNER | | TRUNCATE TABLE | DBA or OWNER
| | UPDATE | DBA, OWNER, or UPDATE | | UPDATE STATISTICS | DBA or OWNER | | UPDATE WHERE CURRENT | DBA, OWNER, or UPDATE
| | VALIDATE | DBA or OWNER; RUN on module, or EXECUTE on procedure
| | WHENEVER | None | | WHILE | None
|
|
