Permission to Execute File Administration Statements

To provide additional database security, a separate level of security controls creating and dropping databases. The -gu database server command-line option controls who can execute the file administration statements.

There are four levels of permission for the use of file administration statements. These levels are: all, none, DBA, and utility_db. The utility_db level permits only a person able to connect to the utility database to use the file administration statements.

Permissions for file administration
-gu switch value	Effect	Applies to
all	Anyone can execute file administration statements	Any database including the utility database
none	No one can execute file administration statements	Any database including the utility database
DBA	Only DBA-authority users can execute file administration statements	Any database including the utility database
utility_db	Only the users who can connect to the utility database can execute file administration statements	Only the utility database

Examples

On Sun, HP, Linux, and Windows platforms, to permit only the user knowing the utility database password to connect to the utility database and create or delete databases, start the server at the command line with the following command:

start_iq -n testsrv -gu utility_db

On AIX, to permit only the user knowing the utility database password to connect to the utility database and create or delete databases, start the server at the command line with the following command:

start_iq -n testsrv -gu utility_db -iqmt 256

Assuming that the utility database password has been set during installation to IQ&Mine49, the following command starts the Interactive SQL utility as a client application, connects to the server named testsrv, loads the utility database and connects the user:

              dbisql -c "uid=DBA;pwd=IQ&Mine49;dbn=utility_db;eng=testsrv"

Executing this statement successfully connects you to the utility database. You are now able to create and delete databases.

Note: The database name, user ID, and password are case sensitive. Make sure that you specify the same case in the dbisql command and the util_db.ini file.