SQL Statements › GRANT › Description of Non-Plan Security Diagram

Description of Non-Plan Security Diagram

ALL or ALL PRIVILEGES

Grants all privileges (excluding ALTER and INDEX) for which you have GRANT authority on all tables or views named in the ON clause. GRANT ALL is a CA Datacom/DB extension.

If you do not use ALL, you must use one or more of the following keywords. Each keyword grants the privilege described, but only as it applies to the tables or views named in the ON clause.

SELECT

Grants the privilege to use the SELECT statement.

INSERT

Grants the privilege to use the INSERT statement.

DELETE

Grants the privilege to use the DELETE statement.

ALTER

Grants the privilege to use the ALTER statement. GRANT ALTER is a CA Datacom/DB extension.

INDEX

Grants the privilege to execute the CREATE INDEX and DROP INDEX statements. GRANT INDEX is a CA Datacom/DB extension.

UPDATE

Grants the privilege to use the UPDATE statement.

UPDATE (column-list)

Grants the privilege to update only the named columns. Each column-name must belong to every table or view named in the ON clause. The column names must be separated by commas and the list must be enclosed with parentheses.

ON or ON TABLE

Introduces a list of table and/or view names. ON TABLE is a CA Datacom/DB extension.

table-name or view-name

Specify the name of one or more tables or views on which you are granting the privileges. The list can be a list of table names or view names, or a combination of the two. The names must be separated by commas.

If you name specific privileges, then for each table or view you name, you must have all those privileges with GRANT authority. If you use GRANT ALL, then for each table or view you name, you must have at least one privilege with GRANT authority.

TO accessor-id

Specify the accessor ID of one or more users to whom you are granting the privileges. This is a user's ID, not a schema auth-id. If listing more than one accessor ID, separate them with commas. Do not specify your own accessor ID, that is to say, you cannot grant privileges to yourself.

TO PUBLIC

Specify PUBLIC when you are granting the specified privileges to all users. A new user automatically has any privileges previously granted to the public.

TO UNKNOWNUSER

Specify UNKNOWNUSER when you are granting the specified privileges to users whose identities cannot be determined by CA Datacom/DB security. UNKNOWNUSER is a CA Datacom/DB extension.

WITH GRANT OPTION

Specify this option if you want the user to whom you have granted the privilege to be able to grant it to another user. The WITH GRANT OPTION cannot be used with PUBLIC.

WITH GRANT

Specify WITH GRANT if you want the user to whom you have granted the privilege to be able to grant it to another user. WITH GRANT cannot be used with PUBLIC or with UNKNOWNUSER. WITH GRANT is a CA Datacom/DB extension.