SQL/MP Installation and Management Guide

Planning Database Security and Recovery
HP NonStop SQL/MP Installation and Management Guide—523353-004
4-7
Authorization Requirements for Database
Operations
CREATE INDEX Local owner of the underlying table, local super ID, local group
manager, or remote owner with purge authority for the table; read
and write authority for the underlying table; and write authority for
the USAGES table of catalogs that describes the underlying table.
CREATE TABLE Read and write authority for all affected catalogs.
CREATE VIEW
Shorthand
Write authority for the USAGES and TRANSIDS tables in catalogs
that describe the underlying tables and views and write authority for
the VIEWS catalog table.
CREATE VIEW
Protection
Local owner of the underlying table, remote owner with purge
authority for the table, or the local super ID or group manager.
DROP CATALOG Read and purge authority for the catalog and read and write
authority for the SQL.CATALOGS table.
DROP CONSTRAINT
DROP INDEX
Local owner, local super ID, local group manager, or remote owner
with purge authority for the underlying table.
DROP PROGRAM
DROP TABLE
DROP VIEW
Purge authority for the object being dropped.
UPDATE
STATISTICS
Local owner, local super ID, local group manager, or remote owner
with purge authority for the table for which statistics are being
updated.
DML Statements
Statement Authority Required
DELETE
INSERT
UPDATE
Read and write authority for the table or protection view being
deleted or modified and read authority for tables, protection views,
and underlying tables of shorthand views specified in subqueries of
the statement.
SELECT Read authority for tables, protection views, and underlying tables of
shorthand views specified in the statement.
Utility Commands
Command Authority Required
CLEANUP Local super ID.
CONVERT Read authority for the file to be converted and the DDL dictionary
and the same authority as for CREATE TABLE, CREATE INDEX,
and LOAD.
COPY Read authority for the source file or object; write authority for the
target file or object; and for objects, read authority for the catalogs
containing the object descriptions.
DISPLAY USE OF Read authority for the catalogs containing the object descriptions.
Table 4-1. Authorization Requirements (page 2 of 3)