Sybase 12.4.2 manual Granting permissions on tables and views, 359

CHAPTER 10 Managing User IDs and Permissions

•You should give users with DBA authority two user IDs, one with DBA authority and one without, so that they connect as DBA only when necessary.

•RESOURCE authority allows the user to create new database objects, such as tables, views, indexes, or procedures.

Granting permissions on tables and views

Combinations of permissions

Example

You can assign a set of permissions on individual tables and views. Users can be granted combinations of these permissions to define their access to a table or view.

•The ALTER (permission to alter the structure of a table) and REFERENCES (permission to create indexes and to create unenforced foreign keys) permissions grant the authority to modify the database schema, and so will not be assigned to most users. These permissions do not apply to views.

•The DELETE, INSERT, and UPDATE permissions grant the authority to modify the data in a table or view. The DELETE, INSERT, and UPDATE permissions grant the authority to modify the data in a table or view. Of these, the UPDATE permission may be restricted to a set of columns in the table or view.

•The SELECT permission grants authority to look at data in a table or view, but does not give permission to alter it.

•ALL permission grants all the above permissions.

All table and view permissions are granted in a very similar fashion. You can grant permission to M_Haneef to delete rows from the table named sample_table as follows:

1 Connect to the database as a user with DBA authority, or as the owner of sample_table.

2Type and execute the SQL statement:

GRANT DELETE ON sample_table TO M_Haneef

You can grant permission to M_Haneef to update the column_1 and column_2 columns only in the table named sample_table as follows:

359