The grant and revoke commands include the default permissions parameter. installmodel or installmaster do not grant default permissions on any system tables (see the table below). Instead, the default permissions on the system tables are assigned when Adaptive Server builds a new database. The partial syntax is:
grant default permissions on system tables
revoke default permissions on system tables
where default permissions on system tables specifies that you grant or revoke the default permissions for the following system tables when you issue it from any database:
sysalternates |
sysjars |
sysquerymatrics |
systhresholds |
sysattributes |
syskeys |
sysqueryplans |
systypes |
syscolumns |
syslogs |
sysreferences |
sysusermessages |
syscomments |
sysobjects |
sysroles |
sysusers |
sysconstraints |
syspartitionkeys |
syssegments |
sysxtypes |
sysdepends |
syspartitions |
sysslices |
|
sysgams |
sysprocedures |
sysstatistics |
|
sysindexes |
sysprotects |
systabstats |
Default permissions applies select to public on all system tables, with these exceptions:
Revokes select on syscolumns(encrkeyid) from public
Revokes select on syscolumns(encrkeydb) from public
Grants select on syscolumns to sso_role
Revokes sysobjects(audflags) permissions from public
Grants permissions for sysobjects to sso_role
Revokes select on all columns of sysencryptkeys from public
Grants select on all columns of sysencryptkeys to sso_role
If you run this command from the master database, default permissions for the following system tables are granted or revoked:
syscharsets |
syslanguages |
sysmessages |
sysservers |
sysconfigures |
syslisteners |
sysmonitor |
syssessions |
syscurconfigs |
syslocks |
sysprocesses |
syssrvroles |
sysdatabases |
syslogin |
sysremotelogins |
systimeranges |
sysdevices |
sysloginrole |
sysresourcelimits |
systransactions |
sysengines |
syslogshold |
syssecmechs |
sysusages |
The command also makes the following changes:
Revokes select on sysdatabases(audflags) from public
Revokes select on syscolumns(encrkeyid) from public
Revokes select on syscolumns(encrkeydb) from public
Grants select on syscolumns to sso_role
Revokes select on sysdatabases(deftabaud) from public
Revokes select on sysdatabases(defvwaud) from public
Revokes select on sysdatabases(defpraud) from public
Revokes select on sysdatabases(audflags2) from public
Grants select on sysdatabases to sso_role.
Revokes select on syslogins(password) to public
Revokes select on syslogins(audflags) from public
Grants select on syslogins to sso_role
Revokes select on syslisteners(net_type) from public
Revokes select on syslisteners(address_info) from public
grant select on syslisteners to sso_role
Revokes select on syssrvroles(srid) from public
Revokes select on syssrvroles(name) from public
Revokes select on syssrvroles(password) from public
Revokes select on syssrvroles(pwdate) from public
Revokes select on syssrvroles(status) from public
Revokes select on syssrvroles(logincount) from public
grant select on syssrvroles to sso_role
Revokes select on sysloginroles(suid) from public
Revokes select on sysloginroles(srid) from public
Revokes select on sysloginroles(status) from public
Revokes select on sysloginroles to sso_role
