Syntax for Securing Database Resources › GRANT Area Access Privileges › GRANT Area Access Privileges Parameters

GRANT Area Access Privileges Parameters

DBAREAD

Specifies that you are giving DBAREAD privilege on the area identified in the ON parameter to the users or groups specified in the TO parameter.

A user with DBAREAD privilege can execute database utilities that perform read-only functions in the specified area.

DBAWRITE

Specifies that you are giving DBAWRITE privilege on the area identified in the ON parameter to the users or groups specified in the TO parameter.

A user with DBAWRITE privilege can execute database utilities that perform read-write functions in the specified area.

Note: DBAWRITE privilege does not imply DBAREAD privilege. You must give both privileges to users or groups who need to execute all utilities.

USE

Specifies that you are giving USE privilege on the area identified in the ON parameter to the users or groups specified in the TO parameter.

A user with USE privilege can create an SQL table or index in the specified area.

ON AREA segment-name.area-name

Identifies the area to which the specified area access privileges apply.

You can wildcard area-name. You cannot wildcard segment-name. The wildcard character is valid after the period following segment-name.

Note: For more information about wildcarding, see Using a Wildcard.

TO

Specifies the users or groups to whom you are giving area access privileges.

PUBLIC

Specifies all users.

authorization-identifier

Identifies a user or group.

Note: Expanded syntax for authorization-identifier is presented in Notes on Security Statement Syntax.

WITH GRANT OPTION

Gives the privilege of granting the specified area access privileges to the users or groups identified in the TO parameter. Only a user with DBADMIN privilege on segment-name or with SYSADMIN privilege can specify WITH GRANT OPTION.

A privilege granted with the WITH GRANT OPTION is called a grantable privilege.

Granting All Area Access Privileges

The following statement grants all area access privileges to the specified users:

on area gl."account-area"
to matt, alex;