A system security officer can change role activation using alter login or alter login profile.
When a user logs in to Adaptive Server, the user’s roles are not necessarily active, depending upon how the role is set up as a default role. If a role has a password associated with it, the user must use the set role command to activate the role.
The system security officer determines whether to activate roles granted by default at login and uses the auto activated roles attribute of alter login profile or alter login to set the default status of user roles individually for each user. Individual users can change only their own default settings. auto activated roles only affects user roles, not system roles.
By default, user-defined roles that are granted are not activated at login, but system roles that are granted are automatically activated, if they do not have passwords associated with them.
The following example shows how to automatically activate roles on login if they are not password protected.
alter login mgr add auto activated roles mgr_role, eng_role
The following example shows how to use the login profile to automatically activate roles on login if they are non password protected. The mgr_role and eng_role must be granted to mgr_lp:
alter login profile mgr_lp add auto activated roles mgr_role, eng_role
