Chapter 13 Managing Database Access

Defining permissions for a user

You can define in the same way permissions for a user, a group, or a role. In this section, we focus on the user case, but the process can be used with groups and roles.

The Permissions page is divided in two zones:

The following states are available:

Grant option Description
Grant Permission is assigned to user
Revoke Permission inherited from a group or role is revoked for the current user. Revoke is only available when the user inherits a privilege from a group or a role
Grant with grant option Grantee has the right to pass on the permission to other users
Revoke with cascade User no longer has permission and the same occurs to all users who were granted permissions by the grantee
None To cancel any state and clean up the current cell

When you define the permissions for a user you have to:

Inherited permissions

A user belonging to a group or having a role with permissions inherits these permissions. You can display or hide users with inherited permissions using the following tools in the upper part of the Permissions page:

Tool Action

Adds users that inherit permissions

Hides users that do not inherit permissions

When you select specific permissions for the user, the list of permissions displays the user permission above the group permission. The following table summarizes the different permission combinations:

Permission combination
Description

Permission granted to user

Permission inherited from group

Permission granted to group and revoked to user

Permission granted to group and overloaded by "with admin option"

Permission granted to group and revoked with cascade to user

Steps To define permissions for a user:

  1. Open the property sheet of a user and click the Permissions tab.

    The Permissions page appears, it displays a list of permissions. The different columns in the list correspond to permissions allowed for a given type of object in the current DBMS. The different tabbed pages correspond to objects supporting permissions in the current DBMS.
  2. Click the Add Objects tool.

    A selection dialog box appears with object of the same type.
  3. Select one or several objects and click OK.

    The selected objects appear in the list in the selected page. If the current user belongs to a group with permissions on the selected objects, these permissions appear in red in the list.
  4. Click inside the cell corresponding to the permission state you want to define.

    or

    Select several objects and click inside one of the cells corresponding to the permission state you want to define for these objects.

    A state automatically appears in the cell.
  5. Click again in the cell until the desired state appears.

    or

    Select a state in the Permission State groupbox in the lower part of the dialog box.

    You define the state of the permission.
  6. Repeat the previous step for each permission of a given object and for each selected object.
  7. Click OK.

 

Copyright (C) 2005. Sybase Inc. All rights reserved.