Database permissions and authorities

The following list contains the new or enhanced permissions and authorities in SQL Anywhere. You must upgrade your database to make use of these changes. See Upgrading SQL Anywhere.

  • Support for inheriting some authorities   SQL Anywhere now supports the inheriting of some authorities, as follows:

    • PROFILE, READCLIENTFILE, READFILE, and WRITECLIENTFILE are inheritable

    • DBA, BACKUP, and RESOURCE authority are not inheritable

    See Authorities overview.

  • New PROFILE authority   Previously, a user needed DBA authority to perform application profiling and diagnostics tracing. Now, users with PROFILE authority can also perform these tasks. For the full list of permissions available to PROFILE authority, see PROFILE authority.

  • New READFILE authority   The READFILE authority allows a user to select from a file using the OPENSTRING clause of a SELECT statement. See READFILE authority and FROM clause.

  • New READCLIENTFILE authority   The READCLIENTFILE authority allows a user read from a file on a client computer. For example, to use the LOAD TABLE statement to load data from a file on the client computer, the user needs READCLIENTFILE authority. See READCLIENTFILE authority.

  • New WRITECLIENTFILE authority   The WRITECLIENTFILE authority allows a user to write to a file on a client computer. For example, to use the UNLOAD TABLE statement to unload data to a file on the client computer, the user needs WRITECLIENTFILE authority. See WRITECLIENTFILE authority.

  • CREATE permission supported for dbspaces   SQL Anywhere now supports the CREATE ON permission for creating database object on the specified dbspace. The CREATE permission can be assigned to the user, or inherited through group membership. See GRANT statement and Understanding permissions.