Release 10.1A: OpenEdge Data Management:
SQL Development

Establishing user accounts and assigning privileges

Using authentication

Logon validation is a mechanism that checks user identification and password at connection time using reference data stored in the OpenEdge RDBMS.

In the OpenEdge RDBMS, the reference table storing user identifications and passwords serves both OpenEdge SQL and Progress 4GL interfaces. Use the CREATE USER statement to enable authentication from the SQL interface. Use the OpenEdge Data Administration tool to enable authentication from the Progress 4GL interface. Authentication can be disabled from either interface.

Creating, altering, or dropping a user via SQL is equivalent to creating, maintaining, or deleting a user with the OpenEdge Data Administration tool. The user list updated for the OpenEdge SQL interface is updated for the Progress 4GL interface and vice versa.

In an environment where an OpenEdge RDBMS is accessed by applications using both Progress 4GL and SQL, the following conditions exist:

If no users have been created — The Progress 4GL interface will not display an authentication dialog box, but the OpenEdge SQL interface will. All SQL users will be required to enter a valid username and password into the authentication dialog box before they will be permitted access to the database.
If users have been created — Users accessing the database through the Progress 4GL interface are required to provide an identification and password. Furthermore, users working from the 4GL interface by default have unlimited privileges. The DBA who controls access from the 4GL interface must place limitations on user privileges or restrict access to certain database objects. SQL users, by default, have no privileges and must be explicitly assigned.