Syntax for Securing Database Resources › GRANT SQL Definition Privileges › GRANT SQL Definition Privileges Parameters

GRANT SQL Definition Privileges Parameters

DEFINE

Gives the ALTER, CREATE, DISPLAY, and DROP privileges, as applicable, on the resource identified in the ON parameter to the users or groups identified in the TO parameter.

ALTER

Gives the ALTER privilege on the resource identified in the ON parameter to the users or groups identified in the TO parameter.

The ALTER privilege on a resource allows a user to modify the definition of the resource.

CREATE

Gives the CREATE privilege on the resource identified in the ON parameter to the users or groups identified in the TO parameter.

The CREATE privilege on a resource allows a user to define the resource.

DISPLAY

Gives the DISPLAY privilege on the resource identified in the ON parameter to the users or groups identified in the TO parameter.

The DISPLAY privilege allows the user to issue a DISPLAY RESOURCE statement on the named resource. The grantable DISPLAY privilege allows a user to issue a DISPLAY PRIVILEGES statement on the named resource.

The DISPLAY privilege on access-module-name also allows a user to execute the EXPLAIN statement on the access module.

DROP

Gives the DROP privilege on the resource identified in the ON parameter to the users or groups identified in the TO parameter.

The DROP privilege on a resource allows a user to delete the definition of the resource.

REFERENCES

Gives the REFERENCES privilege on the table identified in the ON parameter to the users or groups identified in the TO parameter.

The REFERENCES privilege on a table allows a user to define referential constraints in which the named table is the referenced table.

Note: The REFERENCES privilege applies only to tables. It does not apply to functions, procedures, table procedures, views, access modules, or schemas.

ON

Specifies the resource to which the definition privileges apply.

ACCESS MODULE

Specifies that the privileges apply to any version of access-module-name in the associated schema.

access-module-name

Identifies the access module.

You can wildcard access-module-name. If you specify schema-name, the wildcard character is valid after the period following schema-name.

Note: For more information about wildcarding, see Using a Wildcard.

schema-name

Identifies the schema associated with access-module-name.

If you do not specify schema-name, it defaults to the current schema in effect for your session.

Note: For more information about using a schema name to qualify an access module name, see the CA IDMS SQL Reference Guide.

SCHEMA schema-name

Identifies an SQL schema.

You can wildcard schema-name in the SCHEMA parameter.

Note: For more information about wildcarding, see Using a Wildcard.

table table-name

Identifies a table-like object

Note: Expanded syntax for table-name is presented in Notes on Security Statement Syntax.

You can wildcard any identifier when you grant definition privileges on table-name. If you specify schema-name in table-name, the wildcard character is valid after the period following schema-name.

Note: For more information about wildcarding, see Using a Wildcard.

If you do not specify schema-name, it defaults to the current schema in effect for your session.

TO

Specifies the users to whom you are giving the definition privileges.

PUBLIC

Specifies all users.

authorization-identifier

Identifies a user or group.

Note: Expanded syntax for authorization-identifier is presented in Notes on Security Statement Syntax.

WITH GRANT OPTION

Gives the privilege of granting the specified definition privileges on the named resource to the users or groups identified in the TO parameter.

A privilege granted with the WITH GRANT OPTION is called a grantable privilege.