Setting Up Task-based Security Restrictions

For strict security, you can disallow all access to the underlying tables, and grant permissions to users or groups of users to execute certain stored procedures. This approach strictly defines how data in the database can be modified.

1. Create a group for each desired authority.
2. Grant the authority to the designated group.
3. Grant EXECUTE permissions on the IQ procedure for performing the authority tasks to the group.
4. When a new user is created who is to be granted the authority, grant membership for this user to the group created for that authority.