This table lists the system privileges in SQL Anywhere, grouped by the type of object or operation that they pertain to. You can view the roles and privileges a user has from Sybase Central by clicking them and viewing the details that are displayed. You can also retrieve the details by using the sp_displayroles system procedure. See Viewing the roles and privileges for a user or role (Sybase Central) and Viewing the roles and privileges for a user or role (SQL).
By default, all system privileges are inherited by a user who has the SYS_RUN_REPLICATION_ROLE system role. This is because the SYS_AUTH_DBA_ROLE system role has been granted to SYS_RUN_REPLICATION_ROLE. You can revoke the SYS_AUTH_DBA_ROLE system role from SYS_RUN_REPLICATION_ROLE to prevent this, and then grant only the privileges your replication requires to the SYS_RUN_REPLICATION_ROLE system role. However, a user granted the SYS_RUN_REPLICATION_ROLE system role can only exercise the privileges of this role on remote connections. See Security considerations with role-based access control and synchronization.
System privilege according to object or functionality | Description | Users/roles can inherit from: |
---|---|---|
Databases | ||
ALTER DATABASE |
Allows a user to:
|
|
BACKUP DATABASE | Allows a user to back up a database. |
|
CHECKPOINT | Allows a user to force the database server to execute a checkpoint. |
|
DROP CONNECTION | Allows a user to drop any connections to the database. |
|
MANAGE PROFILING | Allows a user to manage database server tracing for application profiling. |
|
MONITOR | Allows a user to monitor a database, including accessing privileged statistics, connected users, and locks. |
|
Database options | ||
SET ANY PUBLIC OPTION | Allows a user to set PUBLIC database options that do not require the SET ANY SECURITY OPTION or the SET ANY SYSTEM OPTION system privileges. |
|
SET ANY SECURITY OPTION | Allows a user to set any PUBLIC security database options. |
|
SET ANY SYSTEM OPTION | Allows a user to set PUBLIC system database options. |
|
SET ANY USER DEFINED OPTION | Allows a user to set user-defined database options. |
|
Data types | ||
ALTER DATATYPE | Allows a user to alter data types. |
|
CREATE DATATYPE | Allows a user to create data types. |
|
DROP DATATYPE | Allows a user to drop data types. |
|
Dbspaces | ||
MANAGE ANY DBSPACE |
Allows a user to:
|
|
Debugging | ||
DEBUG ANY PROCEDURE | Allows a user to debug procedures, functions, triggers, and events. |
|
Events | ||
MANAGE ANY EVENT | Allows a user to create, alter, drop, trigger, and comment on events. |
|
External environments | ||
CREATE EXTERNAL REFERENCE |
Allows a user to create external references in the database. You must have the system privileges required to create specific database objects before you can create external references. For example, creating a self-owned text configuration object that uses an external term breaker and/or prefilter requires both the CREATE TEXT CONFIGURATION and CREATE EXTERNAL REFERENCE system privileges. |
|
MANAGE ANY EXTERNAL ENVIRONMENT |
Allows a user to alter, comment on, start, and stop external environments. |
|
MANAGE ANY EXTERNAL OBJECT | Allows a user to install, comment on, and remove external environment objects. |
|
Files | ||
READ CLIENT FILE | Allows a user to read files on the client computer. |
|
READ FILE | Allows a user to read files on the database server computer. |
|
WRITE CLIENT FILE | Allows a user to write files on the client computer. |
|
WRITE FILE | Allows a user to write files on the database server computer. |
|
Indexes | ||
ALTER ANY INDEX | Allows a user to alter and comment on indexes and text indexes on tables and views owned by any user. |
|
CREATE ANY INDEX | Allows a user to create and comment on indexes and text indexes on tables and views owned by any user. |
|
DROP ANY INDEX | Allows a user to drop indexes and text indexes on tables and views owned by any user. |
|
LDAP | ||
MANAGE ANY LDAP SERVER | Allows a user to create, alter, drop, validate, and comment on LDAP servers. |
|
Materialized views | ||
ALTER ANY MATERIALIZED VIEW | Allows a user to alter and comment on materialized views owned by any user. |
|
CREATE ANY MATERIALIZED VIEW | Allows a user to create and comment on materialized views owned by any user. |
|
CREATE MATERIALIZED VIEW | Allows a user to create and comment on self-owned materialized views. |
|
DROP ANY MATERIALIZED VIEW | Allows a user to drop materialized views owned by any user. |
|
Messages | ||
CREATE MESSAGE | Allows a user to create messages. |
|
DROP MESSAGE | Allows a user to drop messages. |
|
Miscellaneous | ||
ALTER ANY OBJECT |
Allows a user to alter and comment on the following types of objects owned by any user:
|
|
ALTER ANY OBJECT OWNER | Allows a user to alter the owner of any type of object. |
|
COMMENT ANY OBJECT | Allows a user to comment on any type of object that can be created using the CREATE ANY OBJECT system privilege. |
|
CREATE ANY OBJECT |
Allows a user to create and comment on the following types of objects owned by any user:
|
|
DROP ANY OBJECT |
Allows a user to drop the following types of objects owned by any user:
|
|
MANAGE ANY OBJECT PRIVILEGE |
Allows a user to:
|
|
MANAGE CERTIFICATES | Allows a user to create, alter, drop, and comment on certificates. |
|
REORGANIZE ANY OBJECT | Allows a user to reorganize tables and materialized views. |
|
VALIDATE ANY OBJECT | Allows a user to validate tables, materialized views, indexes, and text indexes. |
|
Mirror servers | ||
MANAGE ANY MIRROR SERVER |
Allows a user to:
|
|
Procedures | ||
ALTER ANY PROCEDURE | Allows a user to alter and comment on procedures and functions owned by any user. |
|
CREATE ANY PROCEDURE | Allows a user to create and comment on procedures and functions owned by any user. |
|
CREATE PROCEDURE | Allows a user to create self-owned procedures and functions. |
|
DROP ANY PROCEDURE | Allows a user to drop procedures and functions owned by any user. |
|
EXECUTE ANY PROCEDURE | Allows a user to execute procedures and functions owned by any user. |
|
Auditing | ||
MANAGE AUDITING | Allows a user to run the sa_audit_string system procedure. |
|
SEND EMAIL |
Allows a user to run the following mail-related system procedures:
|
|
Replication | ||
MANAGE REPLICATION |
Allows a user to:
|
|
Roles | ||
MANAGE ROLES |
Allows a user to create new roles and act as a global administrator for new and existing roles. By default, MANAGE ROLES is granted administrative rights on each newly created role. Administration of a role can also be granted directly to users either during or after the creation of the role. When granted directly to a user, the user does not require the MANAGE ROLES system privilege to administer the role. See Role administrators. |
|
UPGRADE ROLE |
Allows a user to be a default administrator of any system privilege that is introduced when upgrading a SQL Anywhere database from version 16.0. |
|
Sequences | ||
ALTER ANY SEQUENCE | Allows a user to alter sequence generators owned by any user. |
|
CREATE ANY SEQUENCE | Allows a user to create sequence generators, regardless of owner. |
|
DROP ANY SEQUENCE | Allows a user to drop sequence generators owned by any user. |
|
USE ANY SEQUENCE | Allows a user to use sequence generators owned by any user. |
|
Server operators | ||
SERVER OPERATOR |
Allows a user to:
|
|
Spatial objects | ||
MANAGE ANY SPATIAL OBJECT |
Allows a user to create, alter, drop, and comment on spatial reference systems and spatial unit of measures. |
|
Statistics | ||
MANAGE ANY STATISTICS | Allows a user to create, alter, drop, and update database statistics for any table. |
|
Tables | ||
ALTER ANY TABLE |
Allows a user to:
|
|
CREATE ANY TABLE |
Allows a user to:
|
|
CREATE PROXY TABLE |
Allows a user to create self-owned proxy tables. |
|
CREATE TABLE |
Allows a user to create self-owned tables. |
|
DELETE ANY TABLE | Allows a user to delete rows in tables and views owned by any user. |
|
DROP ANY TABLE | Allows a user to drop tables (including proxy tables) owned by any user. |
|
INSERT ANY TABLE | Allows a user to insert rows into tables and views owned by any user. |
|
LOAD ANY TABLE | Allows a user to load data into tables owned by any user. |
|
SELECT ANY TABLE | Allows a user to query tables and views owned by any user. |
|
TRUNCATE ANY TABLE | Allows a user to truncate data for tables and materialized views owned by any user. |
|
UPDATE ANY TABLE | Allows a user to update rows in tables and views owned by any user. |
|
Text configuration objects | ||
ALTER ANY TEXT CONFIGURATION | Allows a user to alter and comment on text configuration objects owned by any user. |
|
CREATE ANY TEXT CONFIGURATION | Allows a user to create and comment on text configuration objects owned by any user. |
|
CREATE TEXT CONFIGURATION | Allows a user to create self-owned text configuration objects. |
|
DROP ANY TEXT CONFIGURATION | Allows a user to drop text configuration objects owned by any user. |
|
Tracing | ||
MANAGE ANY TRACE SESSION | Allows a user to perform all event tracing-related operations, with the exception of triggering a user trace event. |
|
NOTIFY TRACE EVENT | Allows a user to trigger a user trace event. |
|
Triggers | ||
ALTER ANY TRIGGER | Allows a user to alter and comment on triggers on tables and views. |
|
CREATE ANY TRIGGER | Allows a user to create and comment on triggers on tables and views. |
|
Users and login management | ||
CHANGE PASSWORD |
Allows a user to manage user passwords for any user. This system privilege can apply to all users, or it can be limited to a set of specified users, or users who are granted one or more specified roles. This system privilege is not required to change a user's own password. |
|
MANAGE ANY LOGIN POLICY | Allows a user to create, alter, drop, and comment on login policies. |
|
MANAGE ANY USER |
Allows a user to:
|
|
SET USER |
Allows a user to temporarily assume the roles and privileges of another user. This system privilege can apply to all users, or can be limited to a set of specified users, or users who are granted one or more specified roles. |
|
Views | ||
ALTER ANY VIEW | Allows a user to alter and comment on views owned by any user. |
|
CREATE ANY VIEW | Allows a user to create and comment on views owned by any user. |
|
CREATE VIEW | Allows a user to create self-owned views. |
|
DROP ANY VIEW | Allows a user to drop views owned by any user. |
|
Web services | ||
MANAGE ANY WEB SERVICE | Allows a user to create, alter, drop, and comment on web services. |
|
![]() |
Discuter à propos de cette page dans DocCommentXchange.
|
Copyright © 2013, SAP AG ou société affiliée SAP - SAP Sybase SQL Anywhere 16.0 |