Granular permissions define server-wide and database-wide privileges.
You must grant or revoke server-wide privileges in the master database. The grantees must be roles, users, or groups in the master database. Adaptive Server stores the permission information for server-wide privileges in master.dbo.sysprotects. See Table 8-15 for a list of server-wide privileges.
You must grant or revoke database-wide privileges in the database for which the command requiring the privilege is intended. The grantees can be users, groups, or roles in the database. Adaptive Server stores the permission information for database-wide privileges in database_name.dbo.sysprotects. See Table 8-16 for a list of database-wide privileges.
Use the grant or revoke commands to grant or revoke server- and database-wide privileges. For example, to allow user Joe to dump any database, a user with the proper privilege issues this command from the master database:
grant dump any database to joe
To allow Joe to create any object on behalf of himself and on behalf of other users in database db2, a user with the proper privilege issues this command from db2:
grant create any object to joe
