Data Access Passkeys

Passkey Screens › Passkey Security › Data Access Passkeys

Data Access Passkeys

Data access passkeys govern access to tables and table definitions. The following are the seven data access passkeys:

Copy allows you to use a table as a source for derivation.
Note: You should be cautious when issuing the Copy passkey. Once a user creates a view using your table(s) as a source for derivation, that user can access your table(s) through the view even if the Copy passkey to the table(s) is removed.
Create allows you to define and store tables through ASF.
Add allows you to add new rows of data to a table and modify and delete existing rows.
Modify allows you to modify and delete rows of data in a table.
Erase allows you to delete a table from ASF through the Delete Table Definition function. If the table is stored, the data is erased from the database.
Redefine allows you to change the definition of a table.
List allows you to display a table, both the data and definition.

For practical considerations, some passkeys are assigned implicitly, as follows:

Holding any data access passkey grants the List passkey. Therefore, you can display the tables associated with the passkey.
Holding an Add passkey also implies that you hold a Modify passkey for the tables associated with the passkey. If you can add new rows to a table, you can also modify existing rows.
Holding a Redefine passkey also implies that you hold a Modify passkey for the tables associated with the passkey. If you can change the definition of a table, you can also modify data in the table.
Holding a Create passkey grants all data access passkeys to the creator of a table for that table, as long as the Create passkey is held.

Data access passkeys can be held for a user, generally allowing access to all of a user's tables, or for an individual table. The following table shows the data access passkeys and how they work when held for users and tables.

Data Access Passkeys

Passkey	For access to	Function
COPY	User	Derive from any table owned by the user
	Table	Derive from the table specified
CREATE	User	Create a table for the user
ADD	User	Add additional rows of data to any existing table owned by the user
	Table	Add additional rows of data to the table specified
MODIFY	User	Modify rows in any table owned by the user
	Table	Modify rows in the table specified
ERASE	User	Erase any table owned by the user
	Table	Erase the table specified
REDEFINE	User	Redefine any table owned by the user
	Table	Redefine the table specified
LIST	User	List any table owned by the user
	Table	List the table specified

Note: Note that List does not imply Copy; therefore, a table with only a List passkey cannot be used for derivation.