NonStop SQL/MP Reference Manual

NonStop SQL/MP Reference Manual—142115
S-15
Authorization Requirements for SQL Statements
but the generalized owner includes the owner user ID, group manager, and super ID on
other nodes in the network.
Authorization Requirements for SQL Statements
To access an object in a NonStop SQL/MP database, an executing process (an SQLCI
session or a host program) must have a processor access ID with the appropriate
authority based on the security string associated with the object. Different SQL
statements have different authorization requirements.
To determine whether a process can update information in a table, for example, NonStop
SQL/MP checks read and write access (checks the process access ID against the “rw”
characters in the security string for the table). To determine whether a process can
change the definition of a table, NonStop SQL/MP also checks read and write access for
the catalog that describes the table (checks the process access ID against the “rw,”
characters of the security strings for files in the catalog).
Using SQLCOMP to compile an SQL program requires read and purge authority to the
program file; read and write authority to the PROGRAMS, USAGES, and TRANSIDS
tables of the catalog where the program will be registered; and read and write authority
to the USAGES and TRANSIDS catalog tables of any catalog with a description of a
table or view used by the program.
Executing an SQL program requires read and execute authority to the program file.
Executions that require dynamic recompilation also require read authority to any catalog
with a description of a table or view used by the program.
The authorization requirements in NonStop SQL/MP statements and SQLCI commands
are described with the specific statement or command entries, but the following table
summarizes requirements for the major SQL statements.