Users with the SYS_RUN_REPLICATION_ROLE system role have full administrative privileges on the database only when connecting from SQL Remote. SQL Remote users have full access to the database and can make changes specified in the messages. Only users with this privilege can run SQL Remote.
The SYS_RUN_REPLICATION_ROLE system role has the following properties:
No distinct privileges when not connected from SQL Remote A user granted the SYS_RUN_REPLICATION_ROLE system role cannot exercise the privileges inherited from this role on any connection apart from SQL Remote or dbmlsync. Therefore, even if the user name and password for a user with the SYS_RUN_REPLICATION_ROLE system role are widely distributed, there are no security issues. As long as the user name has no privileges beyond CONNECT granted on the database, no one can use this user name to access data in the database.
Full database administration privileges from SQL Remote When connecting from SQL Remote, a user with SYS_RUN_REPLICATION_ROLE system role has full database administration privileges on the database.
Discuss this page in DocCommentXchange.
|Copyright © 2014, SAP AG or an SAP affiliate company. - SAP Sybase SQL Anywhere 16.0|