Managing access permissions over database objects
Access permissions restrict a user’s data access to a particular set of databases, tables, or columns. A set of access permissions defines a security group.
The Access permissions on objects page allows the administrator to create, modify, or delete a security group and manage privileges for database objects. Clicking Actions provides the following choices:
*Refresh
Choose Refresh to update the list of groups. Any changes that another administrator made to the groups available are displayed.
*New
Choose New to define a new group. In New group, type the group name and a description, as shown in Figure 1‑8.
Figure 1‑8 Creating a group
Choose OK. The new group appears in the list of security groups.
To define access to database objects for the new group, click Actions and choose Modify.
*Modify
In the list of groups, select a group. Then, click Actions and choose Modify to change the settings for the group. In Updating group, type a new group name or description and grant access to database objects by choosing All, None, or Custom. An object is either a database or a table or field in the database hierarchy.
When Ask for confirmation before applying changes? is not selected, no confirmation message appears before the updated settings are applied.
Choose All to grant full access to the selected object and all objects in that object.
Choose None, the default setting, to restrict access to the selected object and all objects in that object.
Choose Custom to specify limited access to individual database tables and columns. The objects that make up the selected object appear. Choose All or None for each object, as shown in Figure 1‑9.
Figure 1‑9 Modifying the access for a group
Choose OK. Changes to the group name and description appear in the list of groups. If Updates occur immediately is not selected, the updated access settings are applied now.
*Create As
In the list of groups, select a group. Then, click Actions and choose Create As to define a new group containing the settings, including the name, description, and list of data objects specified for the selected group. Create As copies the settings defined for the selected group to the new group definition. In Create As, type the group name and a description.
Choose OK. The new group appears in the list of security groups.
To define access to database objects for the new group, click Actions and choose Modify.
*Delete
In the list of groups, select a group. Then, click Actions and choose Delete to remove a group. In Deleting group, the name, description, and list of data objects appears.
Choose OK. A prompt appears. Choose Yes to confirm deleting the group.