Release 10.1A: OpenEdge Data Management:
SQL Development

> ## Assigning privileges

> Database administrators also control access to a database by assigning user privileges. SQL DBAs use the `GRANT` and `REVOKE` statements to authorize privileges for users who are working with the OpenEdge SQL interface. Privileges granted to users of the Progress 4GL interface are maintained separately using the OpenEdge Data Administration tool.

> A DBA can grant specific privileges–such as selecting, updating, or deleting records–to individual users or to all users. When working through the SQL interface, all user actions against a database are prohibited unless explicitly authorized by the DBA. When users attempt to perform an action for which they do not have privileges, the OpenEdge SQL server generates an error message.

> Conversely, all users working through the Progress 4GL interface have unlimited database privileges, unless those privileges are explicitly restricted by the DBA. Database privileges are defined for the Progress 4GL interface by using the OpenEdge Data Administration tool.

> DBAs must exercise caution when deciding which privileges should be assigned and to whom. For example, if a table or view is selectable by all users, the DBA can grant the ability to select data to the public. Otherwise, the privilege to select data should be granted to those individuals who have a need to do so. The same principle applies to other privileges, such as updating records or executing stored procedures.

> For more information on using SQL `GRANT` and `REVOKE` statements and controlling user privileges, see Chapter 4, " Data Control Language and Security." For more information on Progress 4GL and database security, see OpenEdge Data Management: Database Administration .

Copyright © 2005 Progress Software Corporation www.progress.com Voice: (781) 280-4000 Fax: (781) 280-4095