Login Management

Sybase IQ defines the rules to be followed when establishing a user’s database connection in a database object called a login policy.

A login policy is a named object in the database that consists of a set of options. Each login policy is associated with a set of options called login policy options.

You must have DBA privileges or USER ADMIN authority to create new login policies or assign an existing login policy to a user. For the SQL command syntax to manage policies, see ALTER LOGIN POLICY statement, ALTER USER statement, CREATE LOGIN POLICY statement, and DROP LOGIN POLICY statement in Reference: Statements and Options.

Each new database is created with a default login policy, called the root policy. You can modify the option values for the root login policy, but you cannot drop the policy. When you create a user account without specifying a login policy, the user becomes part of the root login policy. Any options that are not explicitly set when creating a login policy inherit their values from the root policy.

See SQL Anywhere Server – Database Administration > Configuring your database > Managing user IDs, authorities, and permissions.

Note: This reference points to SQL Anywhere documentation.

You can execute login management commands on any multiplex server; they automatically propagate to all servers in the multiplex. For best performance, Sybase recommends that you execute these commands, or any DDL, on the coordinator. See Using Sybase IQ Multiplex.

For instructions on managing login policies with Sybase Control Center, see the Sybase Control Center for Sybase IQ online help in SCC or at http://sybooks.sybase.com/nav/summary.do?prod=10680.

Migrating databases from 12.7 removes existing login management settings. To re-create login management settings after migration, use the SQL syntax in the following section.