Additional functions

This section describes some additional functions you can do with the Manage Authorities window.

Grant Authorities on/for

When you start this window, the object or user you are dealing with will be shown in the Grant Authorities on/for textbox. This is the object or user the authorities will be granted to when you click on the Run button.

You can change this to another object / user, or specify a list of objects / users. This can be useful for:

• granting authorities to a list of users/objects, rather than to a single one
• copying authorities from one object/user to another (see the section Copying Authorities later)

Double-clicking will give you a larger box for typing the list of authorities.

Generate

These options specify what SQL you want to be generated.

• Changes. In most cases, you will use the Manage Authorities window for changing the authorities for an object. In this case, Manage Authorities will generate SQL as per the changes you have made to the grid.
• Grant all. This option is useful if you want a complete list of the current authorities of an object. When Grant all is specified, Manage Authorities will generate the SQL to grant all the authorities shown in the grid.
• Revoke all. This is similar to Grant all, except that it revokes all the authorities. This is useful way of the revoking all the existing authorities of an object / user.

Revoking all Authorities

You can revoke all authorities from an object/user by:

• Display the authorities for the object/user
• Change Generate to Revoke All.
• Click on Run.

Copying Authorities

Often you need to set up the authorities on an object/user to be the same as another object/user. You would do this when you have created a new object/user and wish to have this the same as another. Do this as follows:

• Display the authorities for the object/user you are copying from
• Type into Grant Authorities on/to the name of the object/user you are copying to. This can be a list of object/user names.
• Change Generate to Grant All.
• Click on Run.

Grant / Revoke SQL

The SQL used for Granting and Revoking authorities can be seen by Script > View / edit skeleton SQL for Grants / Revokes. You can change this skeleton SQL if necessary. Any changes you make will only apply to the current window. The next time you activate this window, the skeleton SQL will revert back to the default values. If you want to make a permanent change to the skeleton SQL, use the Administration Configuration window.

SQLID / Grantor

• If your database is DB2 z/OS you will get a textbox labelled SQLID
• If your database is Informix, this textbox will be labelled Grantor.

This allows you to run your Grant / Revoke statements under a different id. DB2 z/OS will set the SQLID. Informix will use the AS clause for the Grants.