NonStop SQL/MP Reference Manual

NonStop SQL/MP Reference Manual—142115
S-11
SECURE File Attribute
SECURE File Attribute
SECURE is a Guardian file attribute that corresponds to the security string that controls
Guardian security for a table, index, collation, protection view, or Guardian file.
"rwep"
is a four-character string that specifies the Guardian read, write, execute, and purge
security for an object or file. (See Security on page S-11 for more information.)
Considerations—SECURE File Attribute
•
Write access requires read access
To provide user groups with write access to tables, views, indexes, or catalogs, you
must specify read access as well as write access for those groups.
•
Network access requires remote passwords
A SECURE attribute that permits access to a file from other nodes in the network is
necessary, but not sufficient, to allow users to access the file over the network.
Network users must also be authorized to access the node on which the file resides
as well as authorized to access that specific file.
Examples—SECURE File Attribute
•
The following SECURE attribute permits other users on the network to execute the
file but permits only the owner to read, write, or purge the file:
SECURE "OONO"
•
The following SECURE attribute permits other users on the network to read or
update the file but permits only the owner to purge or execute the file:
SECURE "NNOO"
Security
Authorization to access NonStop SQL/MP objects is maintained by the Guardian
environment and checked by NonStop SQL/MP. Each NonStop SQL/MP object has
associated security values that determine who can read, write to, execute, and purge the
object.
SQL programs in Guardian files and other Guardian files used in conjunction with
NonStop SQL/MP applications also use the security provided by the Guardian
environment. Each Guardian file has an associated set of security values like those for
NonStop SQL/MP objects.
SECURE “rwep”