NonStop SQL/MP Reference Manual

NonStop SQL/MP Reference Manual—142115
S-14
File Ownership
File Ownership
Each NonStop SQL/MP object or Guardian file is owned by a single Guardian user ID.
When an object or file is created, the owner is the Guardian user ID that corresponds to
the process access ID of the process that created the file. You can change the owner of
an SQL object with an appropriate ALTER command or with the SECURE command.
A generalized owner of an object or file is any user ID that has ownership privileges for
the file. On the node where the file is located, the generalized owner always includes the
user ID that owns the file, the group manager of the group that includes that user ID, and
the super ID. If the owner can purge the file from another node in the network (as
specified with the fourth character of the security string described next), the generalized
owner also includes the same owner user ID on other nodes, the group manager on other
nodes, and the super ID on other nodes.
Security Strings
Each NonStop SQL/MP object or Guardian file is associated with a four-character
security string, rwep, that controls access to that object or file, as follows:
Each character in the security string can have one of the following values:
Local refers to a user logged on to the same node. Remote refers to a user logged on to a
different node in the same NonStop network. For example, the security string “OOOO”
specifies that only the local generalized owner of a file can access the file in any way.
In contrast, the security string “NGNU” specifies that any user on the network can read
or execute the file (the “r” and “e” characters of the security string) but that only the
generalized owner or a local user with a user ID that has the same Guardian security
group as that of the owner can write to the file (the “w” character of the security string).
Only the generalized owner can purge the file (the “p” character of the security string)
r Read access (SELECT)
w Write access (INSERT, UPDATE, or DELETE)
e Execute access (EXECUTE)
p Purge access (DROP)
Value Users Allowed Access
- Local super ID only
O Local owner, local group manager, and local super ID
G Local group member, local owner, and local super ID
A Any local user
U Any member of the owner's user class (local or remote users with the same user
ID), local or remote group manager, and local or remote super ID
C Any member of the owner's community (local or remote users with the same group
number) and local or remote super ID
N Any local or remote user