Login Policies (IQ/SQL Anywhere)

Sybase IQ (v15.0 and higher) and SQL Anywhere (v12 and higher) define the rules to be followed when establishing a user’s database connection in a database object called a login policy. PowerDesigner models login policies as extended objects with a stereotype of <<LoginPolicy>>.

Creating a Login Policy

You can create a login policy in any of the following ways:

  • Select Model > Login Policies to access the List of Login Policies, and click the Add a Row tool.

  • Right-click the model (or a package) in the Browser, and select New > Login Policy.

Login Policy Properties

You can modify an object's properties from its property sheet. To open a login policy property sheet, double-click its Browser entry in the Login Policies folder.

The following extended attributes are available on the Sybase tab:

Name

Description

Locked

Specifies that users are prohibited from establishing new connections.

Scripting name: Locked

Maximum connections

Specifies the maximum number of concurrent connections allowed for a user.

Scripting name: MaxConnections

Maximum days since login

Specifies the maximum number of days that can elapse between two successive logins by the same user.

Scripting name: MaxDaysSinceLogin

Maximum failed logins

Specifies the maximum number of failed attempts, since the last successful attempt, to login to the user account before the account is locked.

Scripting name: MaxFailedLoginAttempts

Maximum non-dba connections

Specifies the maximum number of concurrent connections that a user without DBA authority can make. This option is only supported in the root login policy.

Scripting name: MaxNonDBAConnections

Password expires

Specifies that the user's password will expire in the next login.

Scripting name: PasswordExpiryOnNextLogin

Password grace time

Specifies the number of days before password expiration during which login is allowed but the default post_login procedure issues warnings.

Scripting name: PasswordGraceTime

Password life time

Specifies the maximum number of days before a password must be changed.

Scripting name: PasswordLifeTime