SQL/MP Reference Manual

HP NonStop SQL/MP Reference Manual—523352-013
S-14
File Ownership
subsystem to set the PROGID attribute. NonStop SQL/MP stores the PROGID
attribute of an SQL program in the PROGRAMS table of the catalog in which the
program is registered and in the file label of the program itself.
File Ownership
Each SQL/MP object or Guardian file is owned by a single Guardian user ID. When an
object or file is created, the owner is the Guardian user ID that corresponds to the
process access ID of the process that created the file. You can change the owner of an
SQL object with an appropriate ALTER command or with the SECURE command.
A generalized owner of an object or file is any user ID that has ownership privileges for
the file. On the node where the file is located, the generalized owner always includes
the user ID that owns the file, the group manager of the group that includes that user
ID, and the super ID. If the owner can purge the file from another node in the network
(as specified with the fourth character of the security string described next), the
generalized owner also includes the same owner user ID on other nodes, the group
manager on other nodes, and the super ID on other nodes.
Security Strings
Each SQL/MP object or Guardian file is associated with a four-character security
string, rwep, that controls access to that object or file:
Each character in the security string can have one of these values:
Local refers to a user logged on to the same node. Remote refers to a user logged on
to a different node in the same network. For example, the security string “OOOO”
specifies that only the local generalized owner of a file can access the file in any way.
r Read access (SELECT)
w Write access (INSERT, UPDATE, or DELETE)
e Execute access (EXECUTE)
p Purge access (DROP)
Value Users Allowed Access
- Local super ID only
O Local owner, local group manager, and local super ID
G Local group member, local owner, and local super ID
A Any local user
U Any member of the owner's user class (local or remote users with the same user
ID), local or remote group manager, and local or remote super ID
C Any member of the owner's community (local or remote users with the same group
number) and local or remote super ID
N Any local or remote user