Privileges Concerning Data in Tables

Privileges and Privilege Subjects

Database Objects Privileges

Privileges Concerning Individual Table Records

These (global) privileges can be assigned to individual records in a table:

1. the privilege to use (select) values of all or some columns;
2. the privilege to overwrite (update) values of all or some columns;
3. the privilege to delete records;
4. the privilege to grant one's privileges to another users.

Besides that, you can set up similar privileges to the table as a whole (including the privilege to insert records).

The possibility to set privileges for individual records has to be kept in mind when creating a table. You have to check the Enable record-level privileges in the Table properties dialog window in the table designer to enable it. If you're creating a table with the CREATE TABLE SQL statement, you have to set the REC_PRIVILS switch in the header.

Setting Privileges Interactively

Privileges to individual table records are set from any form into a table. Pick a chosen record in the form and press the F11 key or select the corresponding command from the Data menu - by doing so a dialog for setting privileges appears now enriched with the Record granted and Record effective columns. The Grant for record and Revoke for record buttons allow you to change privileges of a subject to this record (column Record granted).

You can see the actual privileges in the Record effective column. These privileges consist of global table privileges and record privileges, and also of the privileges that are granted to the user for being a member of some usergroups and roles.

As a result of the vast composition of privileges it's impossible to remove a privilege to a record when:

• a subject is granted a privilege for the whole table;
• a usergroup that the user belongs to has this privilege (for table or record);
• a role that the user belongs to has this privilege (for table or record).

The last rows if the grid called Common -... specify which privileges get automatically granted to the EVERYBODY group for each newly inserted record. The settings in these rows is independent on the chosen subject. It's done by the Grant and Revoke buttons.

Manipulating Data Privileges in a Program

Privileges can be set and get by utilizing SQL language methods described here.

Privileges Concerning Data in Tables

Privileges and Privilege Subjects

Database Objects Privileges