July 22nd, 2009

Data Control Language, REVOKE

Posted by admin in R. Data Control Language
Format:   REVOKE {SELECT | INSERT | UPDATE | DELETE | REFERENCES} [column_names]
              ON {table_name | view_name}
              TO {user_id | PUBLIC} [CASCADE | RESTRICT];

The privileges that have been granted with the GRANT statement can be removed with the REVOKE statement. The REVOKE statement syntax is very similar to the GRANT syntax. It simply says that you are removing privileges on specific database objects from one or more database users.
> Many RDBMS systems use a REVOKE similar to DB2′s format which allows you to specify a list of tables and a list of user-IDs. This makes it easier to revoke many privileges at once.

July 20th, 2009

Data Control Language, VIEW Security (Part 2 of 2)

Posted by admin in R. Data Control Language

Using a view to restrict row access:

 

 

Here the user, JAMES, has been given SELECT, INSERT, UPDATE, and DELETE privileges on the MANAGER_VIEW, while PATRICK has the same privileges on the EMPLOYEE_VIEW. But this does not give either JAMES or PATRICK any access privileges to the base table EMPLOYEE_TBL.

July 17th, 2009

Data Control Language, VIEW Security (Part 1 of 2)

Posted by admin in R. Data Control Language

Using a view to restrict column access:

 

Here the user, ACTGUSER, has been given SELECT privileges on the EMPLOYEE_VIEW.
But this does not give ACTGUSER any access privileges to the base table EMPLOYEE_TBL,
so ACTGUSER can not access RATE_HOUR information.

« Previous PageNext Page »