A user name with REMOTE DBA authority has full DBA authority on the database only when connecting from SQL Remote. With REMOTE DBA authority, SQL Remote has full access to the database and can make changes specified in the messages. Only users with REMOTE DBA or DBA authority can run SQL Remote.
As a special authority, REMOTE DBA, has the following properties:
No distinct permissions when not connected from SQL Remote A user that is granted REMOTE DBA authority has no extra privileges on any connection apart from SQL Remote. Therefore, even if the user name and password for a REMOTE DBA user are widely distributed, there are no security issues. As long as the user name has no permissions beyond CONNECT granted on the database, no one can use this user name to access data in the database.
Full DBA permission from SQL Remote When connecting from SQL Remote, a user with REMOTE DBA authority has full DBA permission on the database.
Grant REMOTE DBA authority
Revoke REMOTE DBA authority
Discuss this page in DocCommentXchange.
|
Copyright © 2010, iAnywhere Solutions, Inc. - SQL Anywhere 12.0.0 |