Return-Path: X-Original-To: apmail-trafodion-commits-archive@www.apache.org Delivered-To: apmail-trafodion-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C3992182D6 for ; Wed, 20 Jan 2016 23:05:57 +0000 (UTC) Received: (qmail 59777 invoked by uid 500); 20 Jan 2016 23:05:57 -0000 Delivered-To: apmail-trafodion-commits-archive@trafodion.apache.org Received: (qmail 59748 invoked by uid 500); 20 Jan 2016 23:05:57 -0000 Mailing-List: contact commits-help@trafodion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: commits@trafodion.apache.org Delivered-To: mailing list commits@trafodion.apache.org Received: (qmail 59739 invoked by uid 99); 20 Jan 2016 23:05:57 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 20 Jan 2016 23:05:57 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 100B3180539 for ; Wed, 20 Jan 2016 23:05:57 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.415 X-Spam-Level: ** X-Spam-Status: No, score=2.415 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.554, UPPERCASE_75_100=1.189] autolearn=disabled Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id zLLjoD6K2rJZ for ; Wed, 20 Jan 2016 23:05:46 +0000 (UTC) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with SMTP id D9D482054B for ; Wed, 20 Jan 2016 23:05:45 +0000 (UTC) Received: (qmail 59522 invoked by uid 99); 20 Jan 2016 23:05:45 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 20 Jan 2016 23:05:45 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 04E10DFADE; Wed, 20 Jan 2016 23:05:45 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: rmarton@apache.org To: commits@trafodion.incubator.apache.org Date: Wed, 20 Jan 2016 23:05:45 -0000 Message-Id: In-Reply-To: References: X-Mailer: ASF-Git Admin Mailer Subject: [2/4] incubator-trafodion git commit: TRAFODION-1754 Showddl component does not display grants correctly TRAFODION-1754 Showddl component does not display grants correctly Showddl should be displaying grants on an operation in a manner that allows the privileges to be recreated. Currently, they are returned in the order in which they are read from the metadata. While working on this JIRA, several issues were fixed including: - Consolidated privilege values into one location - NAUserId.h. They used to be stored in NAUserId.h, ComSmallDefs.h, and PrivMgrDefs.h - The check for getting the next available role ID was not correct. - PrivMgrPrivileges::hasColWGO has incorrect indexing - PrivMgrComponentPrivileges::selectAllWhere has incorrect error checking Project: http://git-wip-us.apache.org/repos/asf/incubator-trafodion/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-trafodion/commit/17d1b177 Tree: http://git-wip-us.apache.org/repos/asf/incubator-trafodion/tree/17d1b177 Diff: http://git-wip-us.apache.org/repos/asf/incubator-trafodion/diff/17d1b177 Branch: refs/heads/master Commit: 17d1b177864141e8670dcc8584f95eb0d845e756 Parents: a331938 Author: Roberta Marton Authored: Thu Jan 14 17:29:35 2016 +0000 Committer: Roberta Marton Committed: Thu Jan 14 17:29:35 2016 +0000 ---------------------------------------------------------------------- core/dbsecurity/auth/src/dbUserAuth.cpp | 1 + core/sql/common/ComSmallDefs.h | 15 +- core/sql/common/ComUser.h | 6 +- core/sql/common/NAUserId.h | 24 +- core/sql/regress/privs1/EXPECTED137 | 1274 +++++------------- core/sql/sqlcomp/CmpSeabaseDDLauth.cpp | 27 +- core/sql/sqlcomp/CmpSeabaseDDLauth.h | 1 + core/sql/sqlcomp/CmpSeabaseDDLtable.cpp | 2 +- core/sql/sqlcomp/PrivMgr.cpp | 12 +- core/sql/sqlcomp/PrivMgrComponentOperations.cpp | 2 +- core/sql/sqlcomp/PrivMgrComponentPrivileges.cpp | 377 ++++-- core/sql/sqlcomp/PrivMgrDefs.h | 9 - core/sql/sqlcomp/PrivMgrMD.cpp | 26 +- core/sql/sqlcomp/PrivMgrMDDefs.h | 4 +- core/sql/sqlcomp/PrivMgrPrivileges.cpp | 28 +- core/sql/sqlcomp/PrivMgrRoles.cpp | 8 +- core/sql/udrserv/udrserv.cpp | 3 +- 17 files changed, 671 insertions(+), 1148 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/dbsecurity/auth/src/dbUserAuth.cpp ---------------------------------------------------------------------- diff --git a/core/dbsecurity/auth/src/dbUserAuth.cpp b/core/dbsecurity/auth/src/dbUserAuth.cpp index 3733f0c..cf021f5 100644 --- a/core/dbsecurity/auth/src/dbUserAuth.cpp +++ b/core/dbsecurity/auth/src/dbUserAuth.cpp @@ -64,6 +64,7 @@ class Queue; typedef int Lng32; #endif #include "ComSmallDefs.h" +#include "NAUserId.h" #include "ExExeUtilCli.h" enum {INTERNAL_QUERY_FROM_EXEUTIL = 0x20000}; // LCOV_EXCL_STOP http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/common/ComSmallDefs.h ---------------------------------------------------------------------- diff --git a/core/sql/common/ComSmallDefs.h b/core/sql/common/ComSmallDefs.h index 6e893c5..1c888fb 100644 --- a/core/sql/common/ComSmallDefs.h +++ b/core/sql/common/ComSmallDefs.h @@ -88,20 +88,7 @@ typedef Int32 ComUserID; typedef NABoolean ComBoolean; - -// Defines for special users and roles -#define DB__HIVEROLE "DB__HIVEROLE" -#define DB__HBASEROLE "DB__HBASEROLE" -#define DB__ROOTROLE "DB__ROOTROLE" -#define DB__ROOT "DB__ROOT" -#define SUPER_USER_LIT "33333" - -#define SYSTEM_USER -2 -#define PUBLIC_USER -1 -#define SUPER_USER 33333 // user id of DB__ROOT - -#define HIVE_ROLE_ID 1490000 // role id of DB__HIVEROLE -#define HBASE_ROLE_ID 1490001 // role id of DB__HBASEROLE +// user and role definitions have been moved to NAUserId.h // Defaults for system attributes #define SMD_LOCATION "$SYSTEM" http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/common/ComUser.h ---------------------------------------------------------------------- diff --git a/core/sql/common/ComUser.h b/core/sql/common/ComUser.h index 8695c36..d5f5c2e 100644 --- a/core/sql/common/ComUser.h +++ b/core/sql/common/ComUser.h @@ -73,9 +73,9 @@ class ComUser static Int32 getRootUserID() { return SUPER_USER; } static Int32 getPublicUserID() { return PUBLIC_USER; } static Int32 getSystemUserID() { return SYSTEM_USER; } - static const char * getRootUserName() { return "DB__ROOT"; } - static const char * getPublicUserName() { return "PUBLIC"; } - static const char * getSystemUserName() { return "_SYSTEM"; } + static const char * getRootUserName() { return DB__ROOT; } + static const char * getPublicUserName() { return PUBLIC_AUTH_NAME; } + static const char * getSystemUserName() { return SYSTEM_AUTH_NAME; } static char getAuthType(Int32 authID); static Int16 getUserNameFromUserID(Int32 userID, char *userName, http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/common/NAUserId.h ---------------------------------------------------------------------- diff --git a/core/sql/common/NAUserId.h b/core/sql/common/NAUserId.h index b2e8a33..992c2c3 100644 --- a/core/sql/common/NAUserId.h +++ b/core/sql/common/NAUserId.h @@ -45,9 +45,31 @@ #define MIN_USERID 33333 #define MAX_USERID 999999 #define MIN_ROLEID 1000000 -#define MAX_ROLEID 1499999 +#define MAX_ROLEID 1490000 #define NA_UserId Int32 #define NA_AuthID Int32 #define NA_UserIdDefault 0 +// Defines for special users +#define SYSTEM_AUTH_NAME "_SYSTEM" +#define DB__ROOT "DB__ROOT" + +// Defines for special roles +#define PUBLIC_AUTH_NAME "PUBLIC" +#define DB__HIVEROLE "DB__HIVEROLE" +#define DB__HBASEROLE "DB__HBASEROLE" +#define DB__ROOTROLE "DB__ROOTROLE" + +#define SUPER_USER_LIT "33333" + +#define SYSTEM_USER -2 +#define PUBLIC_USER -1 +#define ROOT_USER_ID 33333 +#define SUPER_USER 33333 + +#define ROOT_ROLE_ID 1000000 +#define HIVE_ROLE_ID 1490000 +#define HBASE_ROLE_ID 1490001 + + #endif /* NAUSERID_H*/ http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/regress/privs1/EXPECTED137 ---------------------------------------------------------------------- diff --git a/core/sql/regress/privs1/EXPECTED137 b/core/sql/regress/privs1/EXPECTED137 index 41c5ebd..5f9b471 100755 --- a/core/sql/regress/privs1/EXPECTED137 +++ b/core/sql/regress/privs1/EXPECTED137 @@ -776,692 +776,403 @@ REGISTER COMPONENT SQL_OPERATIONS SYSTEM DETAIL 'Component for SQL operations'; CREATE COMPONENT PRIVILEGE ALTER AS 'A0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter database objects'; --- GRANT COMPONENT PRIVILEGE ALTER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_ROUTINE_ACTION AS 'AA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter routine actions'; --- GRANT COMPONENT PRIVILEGE ALTER_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_TRIGGER AS 'AG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter triggers'; --- GRANT COMPONENT PRIVILEGE ALTER_TRIGGER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_TRIGGER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_SCHEMA AS 'AH' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter schemas'; --- GRANT COMPONENT PRIVILEGE ALTER_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_LIBRARY AS 'AL' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter libraries'; --- GRANT COMPONENT PRIVILEGE ALTER_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_SEQUENCE AS 'AQ' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter sequence generators'; --- GRANT COMPONENT PRIVILEGE ALTER_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_SEQUENCE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_ROUTINE AS 'AR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter routines'; --- GRANT COMPONENT PRIVILEGE ALTER_ROUTINE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_ROUTINE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_TABLE AS 'AT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter tables'; --- GRANT COMPONENT PRIVILEGE ALTER_TABLE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_TABLE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_VIEW AS 'AV' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter views'; --- GRANT COMPONENT PRIVILEGE ALTER_VIEW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_VIEW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_SYNONYM AS 'AY' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter synonyms'; --- GRANT COMPONENT PRIVILEGE ALTER_SYNONYM - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_SYNONYM - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE AS 'C0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create database objects'; --- GRANT COMPONENT PRIVILEGE CREATE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_ROUTINE_ACTION AS 'CA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create routine actions'; --- GRANT COMPONENT PRIVILEGE CREATE_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_CATALOG AS 'CC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create catalogs'; --- GRANT COMPONENT PRIVILEGE CREATE_CATALOG - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_CATALOG - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_CATALOG" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_CATALOG" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_TRIGGER AS 'CG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create triggers'; --- GRANT COMPONENT PRIVILEGE CREATE_TRIGGER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_TRIGGER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_TRIGGER" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_SCHEMA AS 'CH' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create schemas'; - GRANT COMPONENT PRIVILEGE CREATE_SCHEMA - ON SQL_OPERATIONS TO PUBLIC; - --- GRANT COMPONENT PRIVILEGE CREATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_SCHEMA" ON "SQL_OPERATIONS" TO "PUBLIC"; +GRANT COMPONENT PRIVILEGE "CREATE_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_INDEX AS 'CI' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create indexes'; --- GRANT COMPONENT PRIVILEGE CREATE_INDEX - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_INDEX - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_LIBRARY AS 'CL' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create libraries'; --- GRANT COMPONENT PRIVILEGE CREATE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_LIBRARY" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_PROCEDURE AS 'CP' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create procedures'; --- GRANT COMPONENT PRIVILEGE CREATE_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_PROCEDURE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_PROCEDURE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_SEQUENCE AS 'CQ' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create sequence generators'; --- GRANT COMPONENT PRIVILEGE CREATE_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_SEQUENCE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_ROUTINE AS 'CR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create routines'; --- GRANT COMPONENT PRIVILEGE CREATE_ROUTINE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_ROUTINE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_TABLE AS 'CT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create tables'; --- GRANT COMPONENT PRIVILEGE CREATE_TABLE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_TABLE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_VIEW AS 'CV' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create views'; --- GRANT COMPONENT PRIVILEGE CREATE_VIEW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_VIEW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_SYNONYM AS 'CY' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create synonyms'; --- GRANT COMPONENT PRIVILEGE CREATE_SYNONYM - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_SYNONYM - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_SYNONYM" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP AS 'D0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop database objects'; --- GRANT COMPONENT PRIVILEGE DROP - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_ROUTINE_ACTION AS 'DA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop routine actions'; --- GRANT COMPONENT PRIVILEGE DROP_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_CATALOG AS 'DC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop catalogs'; --- GRANT COMPONENT PRIVILEGE DROP_CATALOG - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_CATALOG - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_CATALOG" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_CATALOG" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_TRIGGER AS 'DG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop triggers'; --- GRANT COMPONENT PRIVILEGE DROP_TRIGGER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_TRIGGER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_SCHEMA AS 'DH' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop schemas'; --- GRANT COMPONENT PRIVILEGE DROP_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_INDEX AS 'DI' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop indexes'; --- GRANT COMPONENT PRIVILEGE DROP_INDEX - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_INDEX - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_LIBRARY AS 'DL' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop libraries'; --- GRANT COMPONENT PRIVILEGE DROP_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_PROCEDURE AS 'DP' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop procedures'; --- GRANT COMPONENT PRIVILEGE DROP_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_PROCEDURE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_PROCEDURE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_SEQUENCE AS 'DQ' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop sequence generators'; --- GRANT COMPONENT PRIVILEGE DROP_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_ROUTINE AS 'DR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop routines'; --- GRANT COMPONENT PRIVILEGE DROP_ROUTINE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_ROUTINE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_TABLE AS 'DT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop tables'; --- GRANT COMPONENT PRIVILEGE DROP_TABLE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_TABLE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_VIEW AS 'DV' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop views'; --- GRANT COMPONENT PRIVILEGE DROP_VIEW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_VIEW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_SYNONYM AS 'DY' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop synonyms'; --- GRANT COMPONENT PRIVILEGE DROP_SYNONYM - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_SYNONYM - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE AS 'M0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage all SQL Operations'; --- GRANT COMPONENT PRIVILEGE MANAGE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_COMPONENTS AS 'MC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage components'; --- GRANT COMPONENT PRIVILEGE MANAGE_COMPONENTS - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_COMPONENTS - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_COMPONENTS" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_COMPONENTS" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_LIBRARY AS 'ML' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage libraries'; --- GRANT COMPONENT PRIVILEGE MANAGE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_LIBRARY" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_PRIVILEGES AS 'MP' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage privileges on SQL objects'; --- GRANT COMPONENT PRIVILEGE MANAGE_PRIVILEGES - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_PRIVILEGES - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_PRIVILEGES" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_PRIVILEGES" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_ROLES AS 'MR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage roles'; --- GRANT COMPONENT PRIVILEGE MANAGE_ROLES - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_ROLES - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_ROLES" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_ROLES" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_STATISTICS AS 'MS' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to show and update statistics'; --- GRANT COMPONENT PRIVILEGE MANAGE_STATISTICS - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_STATISTICS - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_STATISTICS" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_STATISTICS" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_LOAD AS 'MT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to perform LOAD and UNLOAD commands'; --- GRANT COMPONENT PRIVILEGE MANAGE_LOAD - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_LOAD - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_LOAD" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_LOAD" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_USERS AS 'MU' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage users'; --- GRANT COMPONENT PRIVILEGE MANAGE_USERS - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_USERS - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_USERS" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_USERS" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_DELETE AS 'PD' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to delete rows'; --- GRANT COMPONENT PRIVILEGE DML_DELETE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_DELETE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_DELETE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_DELETE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_EXECUTE AS 'PE' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to execute functions'; --- GRANT COMPONENT PRIVILEGE DML_EXECUTE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_EXECUTE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_EXECUTE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_EXECUTE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_USAGE AS 'PG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to use libraries and sequences'; --- GRANT COMPONENT PRIVILEGE DML_USAGE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_USAGE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_USAGE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_USAGE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_INSERT AS 'PI' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to insert rows'; --- GRANT COMPONENT PRIVILEGE DML_INSERT - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_INSERT - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_INSERT" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_INSERT" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_REFERENCES AS 'PR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to reference columns'; --- GRANT COMPONENT PRIVILEGE DML_REFERENCES - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_REFERENCES - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_REFERENCES" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_REFERENCES" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_SELECT AS 'PS' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to select rows'; --- GRANT COMPONENT PRIVILEGE DML_SELECT - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_SELECT - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_SELECT" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_SELECT" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_UPDATE AS 'PU' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to update rows'; --- GRANT COMPONENT PRIVILEGE DML_UPDATE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_UPDATE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_UPDATE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_UPDATE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE QUERY_ACTIVATE AS 'QA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to activate queries'; --- GRANT COMPONENT PRIVILEGE QUERY_ACTIVATE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE QUERY_ACTIVATE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "QUERY_ACTIVATE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "QUERY_ACTIVATE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE QUERY_CANCEL AS 'QC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to cancel queries'; --- GRANT COMPONENT PRIVILEGE QUERY_CANCEL - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE QUERY_CANCEL - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "QUERY_CANCEL" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "QUERY_CANCEL" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE QUERY_SUSPEND AS 'QS' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to suspend queries'; --- GRANT COMPONENT PRIVILEGE QUERY_SUSPEND - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE QUERY_SUSPEND - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "QUERY_SUSPEND" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "QUERY_SUSPEND" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE REMAP_USER AS 'RU' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to remap DB__ users to a different external username'; --- GRANT COMPONENT PRIVILEGE REMAP_USER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE REMAP_USER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "REMAP_USER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "REMAP_USER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE SHOW AS 'SW' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to view metadata information about objects'; - GRANT COMPONENT PRIVILEGE SHOW - ON SQL_OPERATIONS TO PUBLIC; - --- GRANT COMPONENT PRIVILEGE SHOW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE SHOW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "SHOW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "SHOW" ON "SQL_OPERATIONS" TO "PUBLIC"; +GRANT COMPONENT PRIVILEGE "SHOW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE USE_ALTERNATE_SCHEMA AS 'UA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to use non-default schemas'; --- GRANT COMPONENT PRIVILEGE USE_ALTERNATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE USE_ALTERNATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "USE_ALTERNATE_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "USE_ALTERNATE_SCHEMA" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; --- SQL operation complete. @@ -1607,692 +1318,403 @@ REGISTER COMPONENT SQL_OPERATIONS SYSTEM DETAIL 'Component for SQL operations'; CREATE COMPONENT PRIVILEGE ALTER AS 'A0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter database objects'; --- GRANT COMPONENT PRIVILEGE ALTER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_ROUTINE_ACTION AS 'AA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter routine actions'; --- GRANT COMPONENT PRIVILEGE ALTER_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_TRIGGER AS 'AG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter triggers'; --- GRANT COMPONENT PRIVILEGE ALTER_TRIGGER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_TRIGGER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_SCHEMA AS 'AH' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter schemas'; --- GRANT COMPONENT PRIVILEGE ALTER_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_LIBRARY AS 'AL' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter libraries'; --- GRANT COMPONENT PRIVILEGE ALTER_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_SEQUENCE AS 'AQ' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter sequence generators'; --- GRANT COMPONENT PRIVILEGE ALTER_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_SEQUENCE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_ROUTINE AS 'AR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter routines'; --- GRANT COMPONENT PRIVILEGE ALTER_ROUTINE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_ROUTINE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_TABLE AS 'AT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter tables'; --- GRANT COMPONENT PRIVILEGE ALTER_TABLE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_TABLE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_VIEW AS 'AV' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter views'; --- GRANT COMPONENT PRIVILEGE ALTER_VIEW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_VIEW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE ALTER_SYNONYM AS 'AY' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to alter synonyms'; --- GRANT COMPONENT PRIVILEGE ALTER_SYNONYM - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE ALTER_SYNONYM - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "ALTER_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "ALTER_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE AS 'C0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create database objects'; --- GRANT COMPONENT PRIVILEGE CREATE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_ROUTINE_ACTION AS 'CA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create routine actions'; --- GRANT COMPONENT PRIVILEGE CREATE_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_CATALOG AS 'CC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create catalogs'; --- GRANT COMPONENT PRIVILEGE CREATE_CATALOG - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_CATALOG - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_CATALOG" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_CATALOG" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_TRIGGER AS 'CG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create triggers'; --- GRANT COMPONENT PRIVILEGE CREATE_TRIGGER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_TRIGGER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_TRIGGER" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_SCHEMA AS 'CH' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create schemas'; - GRANT COMPONENT PRIVILEGE CREATE_SCHEMA - ON SQL_OPERATIONS TO PUBLIC; - --- GRANT COMPONENT PRIVILEGE CREATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_SCHEMA" ON "SQL_OPERATIONS" TO "PUBLIC"; +GRANT COMPONENT PRIVILEGE "CREATE_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_INDEX AS 'CI' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create indexes'; --- GRANT COMPONENT PRIVILEGE CREATE_INDEX - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_INDEX - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_LIBRARY AS 'CL' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create libraries'; --- GRANT COMPONENT PRIVILEGE CREATE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_LIBRARY" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_PROCEDURE AS 'CP' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create procedures'; --- GRANT COMPONENT PRIVILEGE CREATE_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_PROCEDURE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_PROCEDURE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_SEQUENCE AS 'CQ' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create sequence generators'; --- GRANT COMPONENT PRIVILEGE CREATE_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_SEQUENCE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_ROUTINE AS 'CR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create routines'; --- GRANT COMPONENT PRIVILEGE CREATE_ROUTINE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_ROUTINE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_ROUTINE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_TABLE AS 'CT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create tables'; --- GRANT COMPONENT PRIVILEGE CREATE_TABLE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_TABLE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_VIEW AS 'CV' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create views'; --- GRANT COMPONENT PRIVILEGE CREATE_VIEW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_VIEW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE CREATE_SYNONYM AS 'CY' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to create synonyms'; --- GRANT COMPONENT PRIVILEGE CREATE_SYNONYM - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE CREATE_SYNONYM - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "CREATE_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "CREATE_SYNONYM" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP AS 'D0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop database objects'; --- GRANT COMPONENT PRIVILEGE DROP - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_ROUTINE_ACTION AS 'DA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop routine actions'; --- GRANT COMPONENT PRIVILEGE DROP_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_ROUTINE_ACTION - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_ROUTINE_ACTION" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_CATALOG AS 'DC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop catalogs'; --- GRANT COMPONENT PRIVILEGE DROP_CATALOG - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_CATALOG - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_CATALOG" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_CATALOG" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_TRIGGER AS 'DG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop triggers'; --- GRANT COMPONENT PRIVILEGE DROP_TRIGGER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_TRIGGER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_TRIGGER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_SCHEMA AS 'DH' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop schemas'; --- GRANT COMPONENT PRIVILEGE DROP_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_INDEX AS 'DI' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop indexes'; --- GRANT COMPONENT PRIVILEGE DROP_INDEX - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_INDEX - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_INDEX" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_LIBRARY AS 'DL' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop libraries'; --- GRANT COMPONENT PRIVILEGE DROP_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_PROCEDURE AS 'DP' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop procedures'; --- GRANT COMPONENT PRIVILEGE DROP_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_PROCEDURE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_PROCEDURE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_PROCEDURE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_SEQUENCE AS 'DQ' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop sequence generators'; --- GRANT COMPONENT PRIVILEGE DROP_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_SEQUENCE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_SEQUENCE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_ROUTINE AS 'DR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop routines'; --- GRANT COMPONENT PRIVILEGE DROP_ROUTINE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_ROUTINE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_ROUTINE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_TABLE AS 'DT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop tables'; --- GRANT COMPONENT PRIVILEGE DROP_TABLE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_TABLE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_TABLE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_VIEW AS 'DV' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop views'; --- GRANT COMPONENT PRIVILEGE DROP_VIEW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_VIEW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_VIEW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DROP_SYNONYM AS 'DY' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to drop synonyms'; --- GRANT COMPONENT PRIVILEGE DROP_SYNONYM - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DROP_SYNONYM - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DROP_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DROP_SYNONYM" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE AS 'M0' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage all SQL Operations'; --- GRANT COMPONENT PRIVILEGE MANAGE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_COMPONENTS AS 'MC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage components'; --- GRANT COMPONENT PRIVILEGE MANAGE_COMPONENTS - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_COMPONENTS - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_COMPONENTS" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_COMPONENTS" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_LIBRARY AS 'ML' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage libraries'; --- GRANT COMPONENT PRIVILEGE MANAGE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_LIBRARY - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_LIBRARY" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_LIBRARY" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_PRIVILEGES AS 'MP' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage privileges on SQL objects'; --- GRANT COMPONENT PRIVILEGE MANAGE_PRIVILEGES - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_PRIVILEGES - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_PRIVILEGES" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_PRIVILEGES" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_ROLES AS 'MR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage roles'; --- GRANT COMPONENT PRIVILEGE MANAGE_ROLES - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_ROLES - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_ROLES" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_ROLES" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_STATISTICS AS 'MS' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to show and update statistics'; --- GRANT COMPONENT PRIVILEGE MANAGE_STATISTICS - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_STATISTICS - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_STATISTICS" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_STATISTICS" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_LOAD AS 'MT' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to perform LOAD and UNLOAD commands'; --- GRANT COMPONENT PRIVILEGE MANAGE_LOAD - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_LOAD - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_LOAD" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_LOAD" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE MANAGE_USERS AS 'MU' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to manage users'; --- GRANT COMPONENT PRIVILEGE MANAGE_USERS - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE MANAGE_USERS - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "MANAGE_USERS" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "MANAGE_USERS" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_DELETE AS 'PD' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to delete rows'; --- GRANT COMPONENT PRIVILEGE DML_DELETE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_DELETE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_DELETE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_DELETE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_EXECUTE AS 'PE' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to execute functions'; --- GRANT COMPONENT PRIVILEGE DML_EXECUTE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_EXECUTE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_EXECUTE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_EXECUTE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_USAGE AS 'PG' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to use libraries and sequences'; --- GRANT COMPONENT PRIVILEGE DML_USAGE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_USAGE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_USAGE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_USAGE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_INSERT AS 'PI' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to insert rows'; --- GRANT COMPONENT PRIVILEGE DML_INSERT - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_INSERT - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_INSERT" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_INSERT" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_REFERENCES AS 'PR' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to reference columns'; --- GRANT COMPONENT PRIVILEGE DML_REFERENCES - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_REFERENCES - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_REFERENCES" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_REFERENCES" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_SELECT AS 'PS' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to select rows'; --- GRANT COMPONENT PRIVILEGE DML_SELECT - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_SELECT - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_SELECT" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_SELECT" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE DML_UPDATE AS 'PU' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to update rows'; --- GRANT COMPONENT PRIVILEGE DML_UPDATE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE DML_UPDATE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "DML_UPDATE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "DML_UPDATE" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE QUERY_ACTIVATE AS 'QA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to activate queries'; --- GRANT COMPONENT PRIVILEGE QUERY_ACTIVATE - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE QUERY_ACTIVATE - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "QUERY_ACTIVATE" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "QUERY_ACTIVATE" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE QUERY_CANCEL AS 'QC' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to cancel queries'; --- GRANT COMPONENT PRIVILEGE QUERY_CANCEL - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE QUERY_CANCEL - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "QUERY_CANCEL" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "QUERY_CANCEL" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE QUERY_SUSPEND AS 'QS' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to suspend queries'; --- GRANT COMPONENT PRIVILEGE QUERY_SUSPEND - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE QUERY_SUSPEND - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "QUERY_SUSPEND" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "QUERY_SUSPEND" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE REMAP_USER AS 'RU' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to remap DB__ users to a different external username'; --- GRANT COMPONENT PRIVILEGE REMAP_USER - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE REMAP_USER - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "REMAP_USER" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "REMAP_USER" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" + WITH GRANT OPTION; CREATE COMPONENT PRIVILEGE SHOW AS 'SW' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to view metadata information about objects'; - GRANT COMPONENT PRIVILEGE SHOW - ON SQL_OPERATIONS TO PUBLIC; - --- GRANT COMPONENT PRIVILEGE SHOW - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE SHOW - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "SHOW" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "SHOW" ON "SQL_OPERATIONS" TO "PUBLIC"; +GRANT COMPONENT PRIVILEGE "SHOW" ON "SQL_OPERATIONS" TO "DB__ROOTROLE" WITH + GRANT OPTION; CREATE COMPONENT PRIVILEGE USE_ALTERNATE_SCHEMA AS 'UA' ON SQL_OPERATIONS SYSTEM DETAIL 'Allow grantee to use non-default schemas'; --- GRANT COMPONENT PRIVILEGE USE_ALTERNATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOT - WITH GRANT OPTION; - - GRANT COMPONENT PRIVILEGE USE_ALTERNATE_SCHEMA - ON SQL_OPERATIONS TO DB__ROOTROLE - WITH GRANT OPTION; - +-- GRANT COMPONENT PRIVILEGE "USE_ALTERNATE_SCHEMA" ON "SQL_OPERATIONS" TO "DB__ROOT" WITH GRANT OPTION; +GRANT COMPONENT PRIVILEGE "USE_ALTERNATE_SCHEMA" ON "SQL_OPERATIONS" TO + "DB__ROOTROLE" WITH GRANT OPTION; --- SQL operation complete. @@ -2481,7 +1903,9 @@ drop component privilege lib_view_benefactors cascade; >>revoke component privilege lib_view_repository +>on library_books from sql_user3; ---- SQL operation complete. +*** ERROR[1025] Request failed. Dependent object exists. + +--- SQL operation failed with errors. >>log; >>unregister component Library_books cascade; http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/sqlcomp/CmpSeabaseDDLauth.cpp ---------------------------------------------------------------------- diff --git a/core/sql/sqlcomp/CmpSeabaseDDLauth.cpp b/core/sql/sqlcomp/CmpSeabaseDDLauth.cpp index 6ca7c3c..7d7ac01 100644 --- a/core/sql/sqlcomp/CmpSeabaseDDLauth.cpp +++ b/core/sql/sqlcomp/CmpSeabaseDDLauth.cpp @@ -185,7 +185,7 @@ CmpSeabaseDDLauth::getAuthDetails(const char *pAuthName, bool isExternal) setAuthCreateTime(0); setAuthDbName(PUBLIC_AUTH_NAME); setAuthExtName(PUBLIC_AUTH_NAME); - setAuthID(PUBLIC_AUTH_ID); + setAuthID(PUBLIC_USER); setAuthRedefTime(0); setAuthType(COM_ROLE_CLASS); setAuthValid(false); @@ -287,9 +287,9 @@ bool CmpSeabaseDDLauth::isAuthNameReserved (const NAString &authName) authName.operator()(0,strlen(RESERVED_AUTH_NAME_PREFIX)) == RESERVED_AUTH_NAME_PREFIX || - authName == "_SYSTEM" + authName == SYSTEM_AUTH_NAME || - authName == "PUBLIC" + authName == PUBLIC_AUTH_NAME || authName == "NONE"; @@ -717,6 +717,13 @@ Int32 CmpSeabaseDDLuser::getUniqueID() newUserID = MIN_USERID + 1; else newUserID++; + + // We have 966,667 available ID's. Don't expect to run out of ID's for awhile + // but if/when we do, the algorithm needs to change. Can reuse ID's for users + // that were unregistered. + if (newUserID >= MAX_USERID) + SEABASEDDL_INTERNAL_ERROR("CmpSeabaseDDLrole::getUniqueID failed, ran out of available IDs"); + return newUserID; } @@ -1828,14 +1835,24 @@ Int32 CmpSeabaseDDLrole::getUniqueID() char roleIDString[MAX_AUTHID_AS_STRING_LEN]; NAString whereClause ("where auth_id >= "); - sprintf(roleIDString,"%d",DB_ROOTROLE_ID); + sprintf(roleIDString,"%d",MIN_ROLEID); + whereClause += roleIDString; + whereClause += " and auth_id < "; + sprintf(roleIDString, "%d", MAX_ROLEID); whereClause += roleIDString; newRoleID = selectMaxAuthID(whereClause); if (newRoleID == 0) - newRoleID = DB_ROOTROLE_ID + 1; + newRoleID = ROOT_ROLE_ID + 1; else newRoleID++; + + // We have 490000 available ID's. Don't expect to run out of ID's for awhile + // but if/when we do, the algorithm needs to change. Can reuse ID's for roles + // that were dropped. + if (newRoleID >= MAX_ROLEID) + SEABASEDDL_INTERNAL_ERROR("CmpSeabaseDDLrole::getUniqueID failed, ran out of available IDs"); + return newRoleID; } http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/sqlcomp/CmpSeabaseDDLauth.h ---------------------------------------------------------------------- diff --git a/core/sql/sqlcomp/CmpSeabaseDDLauth.h b/core/sql/sqlcomp/CmpSeabaseDDLauth.h index b91029a..382c64d 100644 --- a/core/sql/sqlcomp/CmpSeabaseDDLauth.h +++ b/core/sql/sqlcomp/CmpSeabaseDDLauth.h @@ -36,6 +36,7 @@ // ***************************************************************************** #include "ComSmallDefs.h" +#include "NAUserId.h" class StmtDDLRegisterUser; class StmtDDLAlterUser; http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/sqlcomp/CmpSeabaseDDLtable.cpp ---------------------------------------------------------------------- diff --git a/core/sql/sqlcomp/CmpSeabaseDDLtable.cpp b/core/sql/sqlcomp/CmpSeabaseDDLtable.cpp index eb4efbd..3b4a5dc 100644 --- a/core/sql/sqlcomp/CmpSeabaseDDLtable.cpp +++ b/core/sql/sqlcomp/CmpSeabaseDDLtable.cpp @@ -7577,7 +7577,7 @@ void CmpSeabaseDDL::seabaseGrantRevoke( if (pGranteeArray[j]->isPublic()) { grantee = PUBLIC_USER; - authName = "PUBLIC"; + authName = PUBLIC_AUTH_NAME; } else { http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/sqlcomp/PrivMgr.cpp ---------------------------------------------------------------------- diff --git a/core/sql/sqlcomp/PrivMgr.cpp b/core/sql/sqlcomp/PrivMgr.cpp index dd6916c..b75f4b2 100644 --- a/core/sql/sqlcomp/PrivMgr.cpp +++ b/core/sql/sqlcomp/PrivMgr.cpp @@ -48,6 +48,7 @@ #include "CmpDDLCatErrorCodes.h" #include "logmxevent_traf.h" #include "ComUser.h" +#include "NAUserId.h" // ========================================================================== @@ -101,7 +102,8 @@ PrivMgr::PrivMgr( const std::string & metadataLocation, ComDiagsArea * pDiags, PrivMDStatus authorizationEnabled) -: metadataLocation_ (metadataLocation), +: trafMetadataLocation_ ("TRAFODION.\"_MD_\""), + metadataLocation_ (metadataLocation), pDiags_(pDiags), authorizationEnabled_(authorizationEnabled) @@ -261,17 +263,17 @@ bool PrivMgr::getAuthNameFromAuthID( { switch (authID) { - case SYSTEM_AUTH_ID: + case SYSTEM_USER: authName = SYSTEM_AUTH_NAME; break; - case PUBLIC_AUTH_ID: + case PUBLIC_USER: authName = PUBLIC_AUTH_NAME; break; case SUPER_USER: authName = DB__ROOT; break; - case DB_ROOTROLE_ID: - authName = DB_ROOTROLE_NAME; + case ROOT_ROLE_ID: + authName = DB__ROOTROLE; break; case HIVE_ROLE_ID: authName = DB__HIVEROLE; http://git-wip-us.apache.org/repos/asf/incubator-trafodion/blob/17d1b177/core/sql/sqlcomp/PrivMgrComponentOperations.cpp ---------------------------------------------------------------------- diff --git a/core/sql/sqlcomp/PrivMgrComponentOperations.cpp b/core/sql/sqlcomp/PrivMgrComponentOperations.cpp index 9afdca2..f6b68fd 100644 --- a/core/sql/sqlcomp/PrivMgrComponentOperations.cpp +++ b/core/sql/sqlcomp/PrivMgrComponentOperations.cpp @@ -496,7 +496,7 @@ std::vector operationCodes; privStatus = componentPrivileges.grantPrivilegeInternal(componentUID, operationCodes, - SYSTEM_AUTH_ID, + SYSTEM_USER, ComUser::getSystemUserName(), granteeID, granteeName,grantDepth);