Managing User IDs and Permissions

Each user of a database must be assigned a unique user ID: the name to type when connecting to the database. This chapter describes how to manage user IDs.

• Database Permissions and Authorities Overview
  Proper management of user IDs and permissions allows you to work effectively while maintaining the security and privacy of appropriate information within the database.
• Login Management
  Sybase IQ defines the rules to be followed when establishing a user’s database connection in a database object called a login policy.
• User Account and Connection Management
  The Sybase IQ login management facility helps you manage users and connections to a database.
• Utility Database Server Security
  Sybase IQ includes a phantom database, called the utility database, that has no physical representation.
• Managing Individual User IDs and Permissions
  Before you manage groups, you should understand user permissions. You can grant permissions to users and create new users using Interactive SQL and Sybase Central.
• Group Management
  Once you understand how to manage permissions for individual users (as described in the previous section) working with groups is straightforward.
• Owner Prefixes for Object Names
  The name of every database object is an identifier. In certain circumstances, you need to use the owner prefix to identify tables, view and procedures.
• Views and Procedures Provide Extra Security
  You can use views and stored procedures to tailor permissions to suit the needs of your organization.
• How User Permissions are Assessed
  Groups do introduce complexities in the permissions of individual users.
• Resources Used by Connections
  Building a set of users and groups allows you to manage permissions on a database. Another aspect of database security and management is to limit the resources an individual user can use.
• Users and Permissions in System Objects
  Information about the current users of a database and about their permissions is stored in the database system tables and system views.
• Transport-Layer Security
  You can secure communications between a client and the IQ server, or between an IQ client and the database server using transport-layer security (TLS).