The grant and revoke commands include the default permissions parameter. installmodel or installmaster do not grant default permissions for some system tables (see the table below). Instead, the default permissions on the system tables are assigned when Adaptive Server builds a new database. The partial syntax is:
grant default permissions on system tables
revoke default permissions on system tables
where default permissions on system tables specifies that you grant or revoke the default permissions for the following system tables when you issue it from any database:
sysalternates |
sysjars |
sysqueryplans |
systypes |
sysattributes |
syskeys |
sysreferences |
sysusermessages |
syscolumns |
syslogs |
sysroles |
sysusers |
syscomments |
sysobjects |
syssegments |
sysxtypes |
sysconstraints |
syspartitions |
sysstatistics |
|
sysdepends |
sysprocedures |
systabstats |
|
sysindexes |
sysprotects |
systhresholds |
default permissions on system tables also makes the following changes:
Revokes select on syscolumns(encrkeyid) from public
Revokes select on syscolumns(encrkeydb) from public
Grants select on syscolumns to sso_role
Revokes sysobjects(audflags) permissions from public
Grants permissions for sysobjects to sso_role
If you run this command from the master database, default permissions for the following system tables are granted or revoked:
syscharsets |
syslanguages |
sysremotelogins |
sysusages |
sysconfigures |
syslocks |
sysresourcelimits |
|
syscurconfigs |
syslogins |
sysservers |
|
sysdatabases |
sysmessages |
systimeranges |
|
sysdevices |
sysprocesses |
systransactions |
The command also makes the following changes:
Revokes select on sysdatabases(audflags) from public
Revokes select on syscolumns(encrkeyid) from public
Revokes select on syscolumns(encrkeydb) from public
Grants select on syscolumns to sso_role
Revokes select on sysdatabases(deftabaud) from public
Revokes select on sysdatabases(defvwaud) from public
Revokes select on sysdatabases(defpraud) from public
Revokes select on sysdatabases(audflags2) from public
Grants seelct on sysdatabases to sso_role.
Revokes select on syslogins(password) to public
Revokes select on syslogins(audflags) from public
Grants select on syslogins to sso_role
| Copyright © 2005. Sybase Inc. All rights reserved. |
|
|
